lg-it Re: Geo-blocking - VPN and access to emails when overseas

From: Anant Shah <AnantS@xxxxxxxxxxxxxxx>
To: "lg-it@xxxxxxxxxxxxx" <lg-it@xxxxxxxxxxxxx>
Date: Sun, 10 Apr 2022 23:29:35 +0000

Hi Caroline,

We have utilised Azure AD for all our authentication services with conditional
access and made MFA (mobile number and/or Authenticator app) mandatory when the
users want to authenticate from outside Australia.

As long as they have an MFA method setup required by our policy in Azure AD
they will be able to access all the internal services over VPN from a trusted
corporate device from untrusted countries.

We utilise Microsoft 365 suite which means our emails are hosted in Exchange
Online so as long as the staff are accessing it from a corporate mobile device
or corporate Windows device they can access it once MFA has been satisfied for
each logon.

Here is MS documentation:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition.

Regards,

Anant Shah
Business Technology Innovation Lead
TECHNOLOGY
P+61299528406
M +61466481691
E AnantS@xxxxxxxxxxxxxxx
W www.ryde.nsw.gov.au

Customer Service Centre 1 Pope Street, Ryde (Within Top Ryde City shopping
centre)
North Ryde Office
Riverview Business Park, Building 0, Level 1, 3 Richardson Place, North Ryde

Let's Connect    Facebook |
Twitter |
Instagram |
YouTube |
eNews

The City of Ryde wishes to acknowledge the Traditional Custodians of the Land
on which we work and pay our respect to the Elders both past, present and
emerging, and extend that respect to all Aboriginal and Torres Strait Islander
peoples.

This email is privileged and confidential. If you are not the intended
recipient please delete the message and notify the sender. The use, copying or
distribution of this message or any information it contains, by anyone other
than the intended recipient is prohibited. Unless stated otherwise, this email
represents only the views of the sender and not the views of the City of Ryde
Council. Please note: information provided to Council in correspondence may be
made publicly available, in accordance with the Government Information Public
Access Act (GIPA Act) 2009.

From: Amit Srivastava <AmitS@xxxxxxxxxxxxxxx>
Sent: Monday, 11 April 2022 9:16 AM
To: Anant Shah <AnantS@xxxxxxxxxxxxxxx>; Rafal Doboszynski
<RafalD@xxxxxxxxxxxxxxx>
Subject: Fwd: Geo-blocking - VPN and access to emails when overseas

Fyi
Regards
Amit
Amit Srivastava

Chief Technology Officer
TECHNOLOGY
P
+61299528403<tel:+61299528403>
E
AmitS@xxxxxxxxxxxxxxx<mailto:AmitS@xxxxxxxxxxxxxxx>
W
www.ryde.nsw.gov.au<http://www.ryde.nsw.gov.au>
[cid:image001.jpg@01D84D85.A085C4E0]<http://www.ryde.nsw.gov.au/Home>

[cid:image002.jpg@01D84D85.A085C4E0]<https://www.ryde.nsw.gov.au/Events/Volunteer-Recognition-Awards>
Customer Service Centre
1 Pope Street, Ryde (Within Top Ryde City shopping centre)
North Ryde Office
Riverview Business Park, Building 0, Level 1, 3 Richardson Place, North Ryde

Let's Connect
Facebook<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fcityofryde&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=3eRRii0tGDwZmU3Ufel50MGrxP6RjG6DEhW6eWA3S0w%3D&reserved=0>
|
Twitter<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FCityofRyde&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=J2E4ovZXhkX3Z0ryP1tjaZbVo3VyFROZ%2FBt7nSmErNg%3D&reserved=0>
|
Instagram<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Finstagram.com%2Fcityofryde&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=LGe8ubhUtSvLUQ64%2FsBRpwZ6%2FPBFh1Hue8UQWeDUhP8%3D&reserved=0>
|
YouTube<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2FCityofRydeCouncil&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=PM5bC%2FCTAOz63lXSQC%2FjnvnLa%2B6oqoKxgGd9Y3oU0%2Fg%3D&reserved=0>
|
eNews<http://www.ryde.nsw.gov.au/enews>

[cid:image003.png@01D84D85.A085C4E0]
The City of Ryde wishes to acknowledge the Traditional Custodians of the Land
on which we work and pay our respect to the Elders both past, present and
emerging, and extend that respect to all Aboriginal and Torres Strait Islander
peoples.

This email is privileged and confidential. If you are not the intended
recipient please delete the message and notify the sender. The use, copying or
distribution of this message or any information it contains, by anyone other
than the intended recipient is prohibited. Unless stated otherwise, this email
represents only the views of the sender and not the views of the City of Ryde
Council. Please note: information provided to Council in correspondence may be
made publicly available, in accordance with the Government Information Public
Access Act (GIPA Act) 2009.

________________________________
From: lg-it-bounce@xxxxxxxxxxxxx<mailto:lg-it-bounce@xxxxxxxxxxxxx>
<lg-it-bounce@xxxxxxxxxxxxx<mailto:lg-it-bounce@xxxxxxxxxxxxx>> on behalf of
Caroline Hodkinson
<CHodkinson@xxxxxxxxxxxxxxxxxxx<mailto:CHodkinson@xxxxxxxxxxxxxxxxxxx>>
Sent: Monday, April 11, 2022 9:01 am
To: lg-it@xxxxxxxxxxxxx<mailto:lg-it@xxxxxxxxxxxxx>
<lg-it@xxxxxxxxxxxxx<mailto:lg-it@xxxxxxxxxxxxx>>
Subject: lg-it Geo-blocking - VPN and access to emails when overseas

Hi everyone,

I am wondering how others are handling geo-blocking with Australians now able
to travel overseas.

Geo-blocking on the firewall prevents staff when overseas from connecting to
our VPN.  It also prevents them from logging into the Council Webmail.  They
are also unable to receive emails on their mobile devices.  We have been
manually “opening” the individual countries when staff inform us they are going
overseas or when they contact us when they are overseas and say they cannot VPN
or receive emails.

Feel free to respond offline.  Thanks

Regards
Caroline

________________________________
Caroline Hodkinson | Manager - Information Technology
[LCC]<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lanecove.nsw.gov.au%2F&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ffjxi%2BsOvwPuR5BYQIco%2B0BzeEVGQ4GsSo%2FiWorFapE%3D&reserved=0>
A:
48 Longueville Road Lane Cove
P:
9911 3504
E:
CHodkinson@xxxxxxxxxxxxxxxxxxx<mailto:CHodkinson@xxxxxxxxxxxxxxxxxxx>

________________________________

[Lane Cove Social
Media]<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Flanecovecouncil&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=x%2Br%2F1Rq4ZrL9c5kG5KS8W5Mg5TdCY6Z27d4TpCIp%2FDc%3D&reserved=0>

**********************************************************************

Looking for something in particular?

Visit our website: -
www.lanecove.nsw.gov.au<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lanecove.nsw.gov.au%2F&data=04%7C01%7CAnantS%40ryde.nsw.gov.au%7C54aaf61f4f7f4fdb448908da1b481adc%7C37554d0da3a54ab19fcc7fff2423076c%7C0%7C0%7C637852293753383152%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ffjxi%2BsOvwPuR5BYQIco%2B0BzeEVGQ4GsSo%2FiWorFapE%3D&reserved=0>

**********************************************************************

This email and any files transmitted with it are confidential and

intended solely for the use of the individual or entity to whom they

are addressed. If you have received this email in error please notify

Lane Cove Council.

Information transmitted via email may be subject to corruption by the

process. Information contained in this email should not be relied upon

where loss, damage or injury is possible. Verified information should

be obtained in writing directly from the authorised Council officers.

This footnote also confirms that this email message has been swept by

Sophos for the presence of computer viruses.

**********************************************************************

References:
- lg-it Geo-blocking - VPN and access to emails when overseas
  - From: Caroline Hodkinson

Other related posts:

» lg-it Re: Geo-blocking - VPN and access to emails when overseas - Anant Shah
» lg-it Re: Geo-blocking - VPN and access to emails when overseas- Racchi, Jason