This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 36%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIL%3C/text%3E%3C/svg%3E)
Is geo restrictions possible for Azure Always On VPN to prevent VPN from connecting from specific locations?
For example: Restrict VPN connections to be accepted when client is in Australia and deny connections if not in Australia.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 34%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
If you are using the Always On VPN user tunnel, you can integrate Azure Conditional Access to provide this capability.
Is it possible for Device tunnel?
With Azure AOVPN you pay for every client connection so we've dropped user VPN tunnel in favour of device tunnel as that allows for new user logon when offsite onboarding
Is device vpn tunnel an option?
MS charges per session so it is not feasible for us to continue user and device concurrent so we have dropped user tunnel in favour of device since that allows new user logon when doing remote onboarding or break-fix replacements.
Yes, but you can't use Azure Conditional Access with the device tunnel, only the user tunnel.