Azure Korea Central Public IP Not Recognized as a Domestic IP by KISA

성욱 임 0 Reputation points
2024-11-20T07:05:19.9333333+00:00

Hello, I am using an Azure virtual machine (VM) with Windows 11 installed, intending to use it as a personal PC. The network is set to Korea Central, and the public IP address shows a location in South Korea. However, the IP is not recognized as being within the range of Korean IPs registered with KISA (Korea Internet & Security Agency).

This is causing an issue with some domestic financial institutions, which block access unless the IP is verified as Korean. I have tried the following solutions:

  1. Changing the public IP address multiple times, but all Korea Central IPs are treated as foreign.
  2. Considering Azure-provided VPN, but I expect the same problem since the IP range appears to be the issue.
  3. Using a paid PC-based VPN to set the IP to Korea, but even those VPN servers are not recognized as Korean by KISA.

I want to avoid cumbersome solutions like directly requesting KISA to register the IP or contacting each financial institution to whitelist the IP.

Is there a simpler, more practical way to resolve this issue? For example, is there a specific configuration in Azure that ensures the VM’s IP is recognized as domestic by KISA?

Thank you for your help!

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,540 questions
{count} votes

1 answer

Sort by: Most helpful
  1. KapilAnanth-MSFT 47,476 Reputation points Microsoft Employee
    2024-11-20T12:40:18.96+00:00

    @성욱 임 ,

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    I understand that you have a Public IP from region Korea South, however, KISA (Korea Internet & Security Agency) is not recognizing this IP as being within the range of Korean IPs.

    First, May I ask how you are confirming KISA is not recognizing this IP as being within the range of Korean IPs?

    • Did you open a support incident with them where KISA confirmed the above?
    • Or did you check it from a tool or site offered by KISA?

    Secondly,

    • From Azure Perspective, if you deploy a Public IP in a certain region, you have two ways to validate it
    • Other than that, you can use 3rd party applications/websites to cross verify the above
    • I did a Lab and I was able to meet the above two requirements.

    To answer your query, "is there a specific configuration in Azure that ensures the VM’s IP is recognized as domestic by KISA?"

    • No
    • There are no such settings, for any region.

    The recommendation is to work with the financial institutions on how they validate this, or with the KISA entity itself on why they are not recognising these IPs as Korean

    Thanks,

    Kapil


    Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.