How does the endpoint service communicate with the web apps ?

All communication between the endpoint service and the web app is over HTTPS. Customers may implement

Conditional access policy for added security or
Network access restrictions in the Azure Web App limiting the source IP address(es) to that of their web proxy server(s)