Microsoft Foundry makes managed virtual network support generally available for evaluations, so customers can run cloud evaluation jobs against models and agents that sit behind private endpoints. The Foundry-managed VNET handles outbound connectivity to the model deployment, the evaluation dataset storage account, and any tool endpoints under test, with no need to maintain bastion hosts or self-hosted runners. Security teams keep network isolation, private DNS, and outbound traffic rules consistent with the rest of their Azure footprint, and audit traces flow through the same Defender and Purview pipelines as production agent traffic. Engineering teams can wire evaluation jobs into CI/CD without opening public network access on protected model endpoints. The capability is on by default for new evaluation runs in supported regions.