With the growing adoption and support of IPv6 across enterprise networks, service providers, and devices, many Microsoft customers are wondering if their users can continue to access their services and applications from IPv6 clients and IPv6 networks.
Microsoft announced its plan to bring IPv6 support to Microsoft Azure Active Directory (Azure AD). This will allow customers to reach the Azure AD services over both IPv4 and IPv6 network protocols (dual stack).
For most customers, IPv4 won’t completely disappear from their digital landscape, so they aren’t planning to require IPv6 or to de-prioritize IPv4 in any Azure Active Directory features or services.
The guidance below is specifically for Azure AD customers, who use IPv6 addresses and also use Named Locations in their Conditional Access policies.
If you have public IPv6 addresses representing your network, take the actions that are described in the following sections as soon as possible.
Advertisement
Customers who use named locations to identify specific network boundaries in their organization, need to:
- Conduct an audit of existing named locations to anticipate potential impact;
- Work with your network partner to identify egress IPv6 addresses in use in your environment.;
- Review and update existing named locations to include the identified IPv6 ranges.
Customers who use Conditional Access location based policies, to restrict and secure access to their apps from specific networks, need to:
- Conduct an audit of existing Conditional Access policies to identify use of named locations as a condition to anticipate potential impact;
- Review and update existing Conditional Access location based policies to ensure they continue to meet your organization’s security requirements.
Failing to follow these steps might result in the following impact:
- Users of IPv6 addresses may be blocked, depending on your organization’s Conditional Access policies and Identity Protection configurations.
- False positive detections due to ‘Mark as trust location’ not being checked for your internal networks and VPN’s can result in users being marked as risky.
Microsoft will share additional guidance on IPv6 enablement in Azure AD here: IPv6 Support in Azure Active Directory.
READ: CREATE NEW YAMMER LIVE EVENT VIDEOS USING MICROSOFT TEAMS, INSTEAD OF USING THE STREAM OPTIONS
END