I provisioned an Azure Service Fabric cluster in North Central US. I was able to initially publish my Service Fabric application to the cluster using Visual Studio and everythin
Check to see if a Network Security Group (NSG) rule is denying inbound traffic to port 3389. If so, remove that port from the deny rule or create a higher priority NSG rule to allow inbound traffic from that port.
If that does not work, carefully check each item in this article under the section title "The minimum rules are required for these ports on Service Fabric clusters"
https://github.com/Azure/Service-Fabric-Troubleshooting-Guides/blob/master/Security/NSG%20configuration%20for%20Service%20Fabric%20clusters%20Applied%20at%20VNET%20level.md
If that does not work, sequentially review the Azure troubleshooting guides at: https://github.com/Azure/Service-Fabric-Troubleshooting-Guides