I have a virtual network hosting an Application Gateway and AKS. Application in AKS communicates with an API in APIM. Due to a revent security requirement, I had to activate the Azure Firewall in the vnet hosting App Gateway and AKS. I added any-any rules for Network and Application (will tighten, just making sure it works first) and implemented UDR on all app subnets. Generally speaking, everything still works EXCEPT now my application in AKS cannot call APIs in APIM – returns a 500 server error. This worked fine before firewall was implemented so I know that is the reason. Any ideas on what needs to change?