After applying the firewall rule here: https://github.com/Azure/RDS-Templates/tree/master/AzureFirewallPolicyForAVD the users can't sign-in to AVD / RemoteApp anymore. There is an authentication loop with using Windows App.