Is is possible to configure Microsoft 365 Sharepoint Online to be accessible via VPN only?

Consider using conditional access policy to restrict user’s accessibility to Microsoft 365 tenant, for example, via Azure VPN IP range only. You can also configure Azure Multi-Factor Authentication (MFA) for VPN users as additional access control. Reference: Enable Azure Multi-Factor Authentication (MFA) for VPN users. If an Answer is helpful, please click " Accept Answer " and upvote it. **Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. **

Best practice is to not send users through VPN as you will degrade their experience and certainly low-latency services, such as real-time co-authoring, may fail to work properly. See https://learn.microsoft.com/en-us/microsoft-365/enterprise/network-planning-and-performance?view=o365-worldwide .

Sharepoint online via VPN

Accepted answer

ChelseaWu-MSFT 6,326 Reputation points

2020-10-08T03:01:22.323+00:00

Consider using conditional access policy to restrict user’s accessibility to Microsoft 365 tenant, for example, via Azure VPN IP range only.

You can also configure Azure Multi-Factor Authentication (MFA) for VPN users as additional access control.
Reference: Enable Azure Multi-Factor Authentication (MFA) for VPN users.

If an Answer is helpful, please click "Accept Answer" and upvote it.
**Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. **
Please sign in to rate this answer.
John Tan 41 Reputation points

2020-10-08T03:06:23.813+00:00

Thanks Chelsea for your answer. This is the assumption that Sharepoint Online is sitting in an intranet environment.

The question now is, is it even possible to configure Sharepoint online (Cloud versio) to operate as Intranet mode, so that it can only be accessible via VPN?

ChelseaWu-MSFT 6,326 Reputation points

2020-10-08T07:58:06.243+00:00

@John Tan
Please use Comment instead of Write an Answer section to post the reply unless when you provide a valid solution to the question. We will be converting this reply for you.
---
Thank you for the update. I don’t think we can actually configure SharePoint Online to work in “intranet mode”.

As a workaround, Microsoft has provided several options to control access, e.g. from unmanaged devices, or based on network location, so that we can restrict access to SharePoint Online while keeping the tenant online.

John Tan 41 Reputation points

2020-10-09T09:20:22.69+00:00

Thanks for the answer.

John Tan 41 Reputation points

2020-10-09T09:20:22.787+00:00

Thanks for the answer.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Sharepoint online via VPN

1 additional answer

Your answer