Impossible travel to atypical locations

%3CLINGO-SUB%20id%3D%22lingo-sub-738212%22%20slang%3D%22en-US%22%3EImpossible%20travel%20to%20atypical%20locations%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-738212%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%3C%2FP%3E%3CP%3EI%20have%20just%20started%20working%20with%20protection%20and%20Azure%20Security%20Center%20and%20I%20have%20just%20found%20some%20problems.%20I%20am%20constantly%20getting%20the%20%22Impossible%20Travel%20Alert%22%20even%20when%20the%20users%20are%20still%20in%20the%20same%20location.%20Are%20there%20specific%20situations%20where%20false%20positives%20can%20arise%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-738212%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-738327%22%20slang%3D%22en-US%22%3ERe%3A%20Impossible%20travel%20to%20atypical%20locations%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-738327%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F371152%22%20target%3D%22_blank%22%3E%40wmorais%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20have%20several%20situations%2C%20a%20VPN%2C%20a%20Wifi%20Connection%20or%20a%20piece%20of%20software%20for%20example%20in%20your%20phone%20that%20the%20outbound%20of%20your%20Internet%20connection%20is%20outside%20and%20far%20from%20your%20location.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-739012%22%20slang%3D%22en-US%22%3ERe%3A%20Impossible%20travel%20to%20atypical%20locations%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-739012%22%20slang%3D%22en-US%22%3EHi%20%40Nuno%2C%3CBR%20%2F%3EThanks%20a%20lot%20for%20the%20reply.%20Do%20the%20above%20scenarios%20occur%20even%20when%20the%20person%20is%20still%20in%20the%20building.%20I%20have%20got%20cases%20where%20people%20have%20not%20even%20left%20their%20offices%20and%20most%20of%20them%20do%20not%20have%20access%20to%20VPN%20connections.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-739020%22%20slang%3D%22en-US%22%3ERe%3A%20Impossible%20travel%20to%20atypical%20locations%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-739020%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F371152%22%20target%3D%22_blank%22%3E%40wmorais%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20that%20users%20do%20not%20left%20the%20business%2C%20did%20not%20connect%20to%20other%20networks%20and%20does%20not%20have%20an%20VPN%2C%20the%20user%20maybe%20is%20compromised%20their%20credentials%2C%20or%20gave%20access%20to%20an%20app%20that%20can%20login%20on%20their%20behalf.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi there,

I have just started working with protection and Azure Security Center and I have just found some problems. I am constantly getting the "Impossible Travel Alert" even when the users are still in the same location. Are there specific situations where false positives can arise?

3 Replies
Highlighted

Hi @wmorais,

 

You can have several situations, a VPN, a Wifi Connection or a piece of software for example in your phone that the outbound of your Internet connection is outside and far from your location. 

Highlighted
Hi @Nuno,
Thanks a lot for the reply. Do the above scenarios occur even when the person is still in the building. I have got cases where people have not even left their offices and most of them do not have access to VPN connections.
Highlighted

Hi @wmorais,

 

If that users do not left the business, did not connect to other networks and does not have an VPN, the user maybe is compromised their credentials, or gave access to an app that can login on their behalf.