IPv6 fencing Conditional Access Policies now supported
May 3, 2021Angel Wong

Summary
Extended Conditional Access Policy (CAP) support in Azure DevOps to include IPv6 fencing policies, in addition to existing IPv4 support. This ensures that IPv6 traffic is subject to the same access rules defined in Azure AD, enhancing security for organizations using Azure DevOps. Previously, all inbound IPv6 traffic was allowed. This update requires users to update their CAP configurations to include IPv6 ranges if they wish to restrict access from these addresses.
More from the Azure DevOps IP Address Management trail
- Important Update: Server Name Indication (SNI) Now Mandatory for Azure DevOps Services
- Update to Azure DevOps Allowed IP addresses
- Important: Switching CDN providers
- Deprecating weak cryptographic standards (TLS 1.0 and 1.1) in Azure DevOps Services
- Deprecating weak cryptographic standards (TLS 1.0 and TLS 1.1) in Azure DevOps