Forum Discussion
malvinportner
May 11, 2022Copper Contributor
Test Impossible Travel Alert
Hello there I am trying to test the Impossible Travel Alert in the Microsoft Defender for Cloud Apps. For that, I use the NordVPN to login from 2 different Countries and to generate the Impossib...
BarryGoblon
Feb 14, 2024Iron Contributor
malvinportner, the 7-day detection policy learning period is likely still in progress after the recent edit. Give it the full duration. Also, NordVPN is probably obscuring the location change that would signal impossible travel.
Try logging in from physically distant spots without routing through a VPN. Remember that only one login location may be designated high-risk, while alerts require risky access at both endpoints. Verify country-level locations are both unsafe. If after 7 days and logins from clearly different non-VPN locations don't trigger alerts, some policy configuration adjustments may be needed.