Office 365 Location based Conditional access

[supportman]

Has anyone turned on location based conditional access on their Office 365 tenants? We now have a rule that bans anyone signing in from another country.

 

We've done it here and it appears to work well for IP4 addresses. One problem appears to be that iPhones now give out an IP6 address and you cant filter by location.

 

We got around this by whitelisting all IP6 addresses but it kind of defeats the point of only allowing UK IP addresses.

 

Has anyone else done this?

Edited March 19, 2021 by supportman

[psydii]

We had someone step around this so easily. They probed from a country with lax computer security laws, and as soon as they hit the MFA check they jumped to a disreputable UK data center and logged in from there. We got the alert from the MFA/Suspicious Country, but didn't react in time to stop at least one screenful of emails being read.

[Ex-MGSTech]

Also can be spoofed by use of a proxy....