title: Cannot access windows container from outside the Azure host vm
body: <p>I have created a docker container in Azure on Windows 2016.
  Here is my DOCKERFILE:</p>
  
  <pre><code>FROM microsoft/aspnet
  
  COPY ./ /inetpub/wwwroot
  
  EXPOSE 443
  EXPOSE 80
  </code></pre>
  
  <p>I run it up like so: </p>
  
  <pre><code>docker run -d --name myctr myimg -p 443:443
  </code></pre>
  
  <p>I can browse to it via the a domain name, which I configure in the hosts file.  SUCCESS!</p>
  
  <p>On a remote machine, outside of the Azure network, I configure my hosts file, using the IP address of the Azure VM (and have also tried using the IP address of the container - <em>not sure which one to use!</em>)</p>
  
  <p><strong>However, I can't browse to it from outside of Azure.</strong>  </p>
  
  <p><strong>Windows Firewall</strong></p>
  
  <p>I have disabled the Windows firewall. </p>
  
  <p><strong>Azure NSG</strong></p>
  
  <p>I have set up a Network Security Group which allows traffic in on port 443 (I have another website running on this box, and can access it from outside of Azure, with success)</p>
  
  <p><strong>Netstat shows the following:</strong></p>
  
  <pre><code>netstat -ano | findstr :443 | findstr ESTABLISHED
    TCP    10.0.0.4:49682         99.99.99.99:443       ESTABLISHED     1252
    TCP    10.0.0.4:49700         99.99.99.98:443       ESTABLISHED     2476
    TCP    10.0.0.4:49718         99.99.99.92:443       ESTABLISHED     5112
  </code></pre>
  
  <p><em>How do I configure the container/host/Azure so that I can view the website hosted on the container from a remote machine outside of Azure?</em>
  Any ideas greatly appreciated!</p>