Limit access to AVD by IP

[Jason_B1025]

We are using AVD for a vendor, they will be using an Azure AD account and the AVD is not connected back to our AD or network.

I need to limit the IP space that can connect to AVD. With a standard azure vm I can limit it with a network security group.

Can I use NSG with AVD? the vm's don't have a public IP, so will the NSG see the source IP of the end user or only the proxy of the host pool?

[#2]

You could use a conditional access policy to only allow access from that ip?

[#3]

Great idea, I'll look into that. I'm assuming the AVD app that is in the CA policy is for all AVD, so If we use AVD for any other purpose I'll have to get creative with the CA policies :)

[#4]

You can create different CA policies and point them towards different AAD groups but all for the AVD app.