Hi there. I found out that if I want to access a specific port in a VM (Java RMI in my case), I have to configure an endpoint for this port. However, I was surprised that configuring an endpoint was enough to access the port. I didn't change the firewall rules in the guest for this port and it was immediately accessible from outside Microsoft Azure.
Does configuring an endpoint opens a port in the guest VM firewall?