Set the network range to which session control applies

Question

Hello,MDCA's session control is ignore network(IP range) settings in Microsoft Entra ID Conditional Access policy?I understand that the following items are required for the session control policy.&nbsp;- a conditional access policy that matches the traffic.- a session policy in defender for cloud apps.&nbsp;However, downloads are blocked&nbsp;in Microsoft Edge even if there is no Entra ID CA policy applied.&nbsp;&nbsp;Microsoft Entra ID Conditional Access policy assignments(Network) not working with MDCA&nbsp;

danghoang95 · Answer

Seonghoon&nbsp;You can check the Sharepoint admin center for Access control policy.

seonghoon · Answer

danghoang95&nbsp;"Allow access only from specific IP address ranges" was disabled. And&nbsp;the browser displays same message as when the MDCA's session control&nbsp;policy was applied.&nbsp;

keith_fleming · Answer

Seonghoon&nbsp;the network settings are new and are related to SSE.&nbsp; I would recommend opening a ticket so we can investigate this further and understand if there is some conflicting behavior.

seonghoon · Answer

Thank you, The ticket interim findings show that existing EntraID settings (network) are not applied when "Edge Protection for Business" (https://security.microsoft.com/cloudapps/settings?tabid=edgeIntegration) is enabled.I don't understand if this behavior was an intended change by Microsoft, then why that new feature has been activated as opt-out.

Forum Discussion

Set the network range to which session control applies

4 Replies

Resources