Using Conditional access to create a geo-fence - not applying policy

Question

Good day community.&nbsp;&nbsp;In our tenant, we are getting login attacks on some of our accounts.&nbsp; We have enabled MFA, but would like to stop these attacks before authentication starts.&nbsp; Our employees mostly work from a single country, so geo-fencing should be a good solution to implement.&nbsp; Some examples of the attacks below: &nbsp;&nbsp;We implemented conditional access policy for all our accounts in our organisation.&nbsp; We created Named Locations for where it is safe to work from (our country) and created another location for all other countries.&nbsp; Example of this below:The conditional access policy should block all connections from the rest of the world to authenticate to our tenant:&nbsp;&nbsp;Unfortunatly, the attacks on our account(s) are still coming through and the logs says conditional access is not being applied.&nbsp; The "view policy impact" report also shows that 100% is not applied.&nbsp;&nbsp;&nbsp;What are we missing?&nbsp; Thanks!&nbsp;

vasilmichev · Accepted Answer

Conditional access policies act after the initial authentication, you will not be able to prevent such attempts with it. You can use Exchange Online's Authentication policies instead:&nbsp;https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/disable-basic-authentication-in-exchange-online#authentication-policy-procedures-in-exchange-online&nbsp;

Forum Discussion

Using Conditional access to create a geo-fence - not applying policy

1 Reply

Resources