Add a system route for KMS
Could you please add a system route to the KMS server. (kms.core.windows.net / 18.104.22.168)
When using forced-tunneling, we must set an UDR to the KMS manually.
Thanks for the feedback, we are exploring options to solve this inconvinient when using default routes.
Unfortunatelly kms is not a single VIP globally, exploring options.
Jeff Miles commented
This would be really advantageous! Along the lines of FQDN resolution within an NSG, additional service tags are always needed.