Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

'MICROSOFT-CORP-MSN-AS-BLOCK' is violating Conditional Access Policy (CAP)

Iron Contributor

Hello folks,


I have a CAP that prevents log-ins from foreign countries. I have excluded 'United States' in the 'Location' condition as well. I am getting a lot of incidents titled "Attempt to bypass conditional access rule in Azure AD" and when I went to investigate the logs, I found two IP addresses: ["",""] common for all the users. VirusTotal lists both of them as MICROSOFT-CORP-MSN-AS-BLOCK. Have you guys faced a similar situation or know the remedy for this?

0 Replies