Azure AD user-sign IP address before NAT

Question

Azure AD user-sign IP address before NAT

Giuseppe Bottani 1

Hello,

Azure AD user sign-in seems to record the public IP address of my clients, therefore after NAT. If many users are behind a Firewall/router for broadband access they all have the same IP.

Is there a way to record the private IP address too?

The reason is per-user security policy and logging based on AD username.

James Hamil 17,771 Reputation points Microsoft Employee

2020-12-29T23:41:41.077+00:00

Hi! We are investigating your issue and will update you shortly.

Best,
James
Giuseppe Bottani 1 Reputation point

2021-01-05T07:44:50.783+00:00

Hi, do you have any update about it?
I did check all sign-in logs and activity logs but for azure AD only the source IP = public IP address is recorded. Is there a way to collect other addresses (e.g. the physical adapter IP address)?
Thx,
Giuseppe

James Hamil 17,771 Reputation points Microsoft Employee

2020-12-29T23:41:41.077+00:00

Hi! We are investigating your issue and will update you shortly.

Best,
James
Giuseppe Bottani 1 Reputation point

2021-01-05T07:44:50.783+00:00

Hi, do you have any update about it?
I did check all sign-in logs and activity logs but for azure AD only the source IP = public IP address is recorded. Is there a way to collect other addresses (e.g. the physical adapter IP address)?
Thx,
Giuseppe

Answer 1

James Hamil 17,771 Microsoft Employee

Hi @Giuseppe Bottani , the product group got back to me and confirmed ESTS does not get the pre-NAT IP. I suggest filing a feature request here. Hopefully it will become an option in the future.

Best,
James

JohnKozitzki-FE 1 Reputation point

2021-12-28T14:07:52.323+00:00

Did this feature request ever get submitted?...if not I can submit...
We are having the same problem with seeing only public NAT IPs in the logs and would like to know if and when the feature will become available.
Let me know...

Thanx

John K

Azure AD user-sign IP address before NAT

1 answer

Activity