Is there a known issue with conditional access lists

John Whitmore 0

I have a client that had a conditional access policy allowing only certain countries to access their applications. About 1.5 hrs ago, this appears to have broken and most IPs are now being allowed only if "unknown" is selected.

Jorre Dewyn 0 Reputation points

2024-08-08T06:16:58.0633333+00:00

Hello,

We had the same issue yesterday with WAF policy and geomatch rules. Seems to be fixed now
KapilAnanth-MSFT 44,311 Reputation points Microsoft Employee

2024-08-21T16:04:54.1733333+00:00

Thanks @John Whitmore for the confirmation.

If you'd like a RCA, I would suggest you raise a support ticket where a support engineer can provide you with more information

Cheers,

Kapil

1 answer

KapilAnanth-MSFT 44,311 Reputation points Microsoft Employee

2024-08-07T12:21:27.1466667+00:00
@John Whitmore ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I see you have used "Azure Application Gateway" tag but mentioned "Conditional Access" (which is a different service) Can you be more specific?

Are you using Entra ID Conditional Access

or Geomatch custom rules from App gateway WAF?

Cheers,

Kapil
Please sign in to rate this answer.
John Whitmore 0 Reputation points

2024-08-07T12:24:32.57+00:00

Geomatch custom rules from App gateway WAF

Looks like it is starting to rectify now. Client is seeing a few issues still, but improving - so looks like the geolocation list has been corrected and propagating. Would be nice if there was some way to confirm there was an issue that has been corrected so I can reassure the client that the diagnosis of a corrupt geolocation table is/was correct.

KapilAnanth-MSFT 44,311 Reputation points Microsoft Employee

2024-08-20T07:48:42.6733333+00:00

@John Whitmore ,

Apologies for the delay in my response.

Our Product Team is aware of this and it appears the issue has been now mitigated.

Can you please confirm if the issue is still happening?

Cheers,

Kapil

John Whitmore 0 Reputation points

2024-08-20T21:06:34.42+00:00

I can confirm issue was resolved a few hours later
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Is there a known issue with conditional access lists

1 answer

Your answer