NSG service tag for Azure Backup aims to ease the process of running backups in an environment locked down using NSGs. With this, you now have the option to simply use the ‘AzureBackup’ tag to allow outbound access to Azure Backup for your workload (SQL server) agent running inside the VM, instead of managing whitelisting of required IPs.
Source: Microsoft Azure – aggiornamenti