Is there a way to automatically add IP addresses from a specific country to a blacklist?

Hi Aaron Horna,

my approach for Cloud Apps is to use SSO from AAD whenever possible. Among many other benefits, in Conditional Access you can configure rules that use https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition - which can also be countries.

However, an even better approach would be to use Device State (https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-hybrid-azure-ad-joined-device, https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-device-to-be-marked-as-compliant) and Session Risks from AAD Identity Protection instead of IP addresses. It's not that hard for an attacker to obtain an IP address from your country.

Greetings Chris