Forum Discussion
malvinportner
May 11, 2022Copper Contributor
Test Impossible Travel Alert
Hello there I am trying to test the Impossible Travel Alert in the Microsoft Defender for Cloud Apps. For that, I use the NordVPN to login from 2 different Countries and to generate the Impossib...
Adin_Calkic
May 11, 2022Steel Contributor
malvinportner
May 12, 2022Copper Contributor
Yes, it's an Azure Premium p2.
Could it be, because the policy was edited less than 7 Days ago (Microsoft says the policy needs 7 days to "learn" before alerts are generated)? The Policy was activated way earlier.
- mikhailfMay 12, 2022Steel Contributor
Hello Malvin,
Try to create a VM on Azure in Australia, for example (if you are not in Australia), and log into Microsft365 from this VM.Probably it detects the VPN you use:
"To make this work, the detection logic includes different levels of suppression to address scenarios that can trigger false positive, such as VPN activities, or activity from cloud providers that don't indicate a physical location."