Defender for Cloud trusted Locations

Copper Contributor

Hi everyone,

In my organization Defender for Cloud, I have some alerts due to some IT Teams performing some activities using a VPN connection coming from Japan, US etc.

The IP's are coming from our external IP's all around the world.

It is possible to add trusted locations in Defender for Cloud or I just need to add in Azure AD locations?

 

Thank you

1 Reply

@Rubenfrreis, you can use alert suppression rules to add in IP addresses to exclude from specific alerts, like activity coming from an unusual location. For more information: Using alerts suppression rules to suppress false positives or other unwanted security alerts in Micr.... Let me know if this helps. 

Lara_Goldstein_0-1654622798357.png