Can Duo block connection based on IP?

[endlessknot]

Hi,

An external IP hit a DUO Account.

The user reported it as fraudulent.

Upon checking our Firewall Logs, it showed this IP was trying to log into our firewall.

Can Duo block connection based on IP ?

If yes, where is this setting ?

Thank you

[Amy2]

Hey @endlessknot, welcome to the Duo Community! The thread “Is there a way to restrict certain Duo users to specific IP address ranges?” has the answer you’re looking for.

While you cannot block access from particular IP addresses, the Authorized Networks policy has an option “Deny access from all other networks,” which could be used in conjunction with the other policy options to accomplish this. You can bypass or enforce 2FA from specific networks, for example, and then block access from all other networks that are not listed.