General

We use two checks to check the configuration of Conditional Access for the presence of Attic's IP addresses. These IP addresses are placed in a Named Location called [ATTIC] Hosts. This named location can then be set as an exception for certain Conditional Access policies.

Rationale

When access from the Attic back-end to your environment is blocked, Attic cannot function. Therefore, exceptions will sometimes have to be made in Conditional Access for Attic's IP addresses, for which Named Locations are best used for reasons of manageability. In this way, Attic can clearly monitor that the named location exists and that the current IP addresses of our back-end have been added to it, and if not, add them.

Attic Fix

A fix is ​​available for this check! This will be performed automatically on your environment since the change has no effect on your configuration. A ticket will be created but will therefore be closed again almost immediately.

More information

1. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-assignment-network