What is considered as “remote” and “outside” connections in the MFA settings?

“Remote” means any remote session (RDP, VPN, IIS or SaaS) that originates from inside or outside the network.

“Outside” means any remote session (RDP, VPN, IIS or SaaS) that originates from outside the network.

By default “outside” connections are ones where the source machine is not within the following IP ranges:

• 10.0.0.0 - 10.255.255.255
• 172.16.0.0 - 172.31.255.255
• 192.168.0.0 - 192.168.255.255
• fc00::/7
• fe80::/10

For more details on how to apply MFA for outside connections via Remote Desktop Gateway, see this use case.

In the advanced settings (F7) you can define what you would like UserLock to consider as “Inside” or “Outside” IP addresses: