A bank disabled public network access on its Foundry resource and added a private endpoint on a subnet in its hub virtual network. The private endpoint connection shows Approved. Data scientists on VMs in a peered spoke virtual network report they can still reach the resource, but their traffic never touches the private IP address; running nslookup against the resource's hostname from one of those VMs still returns a public IP address.