Hey @jc253
Alternative 1: In case your Org regulates access to Adobe Applications through Federated ID with VPN, then it will be an easy process to Exclude IP addresses (with ranges).
Alternative 2: In case the access is provisioned through Adobe IDs which are created with Corporate Email Ids or personal email Ids, it's a tedious process to exclude IP addresses of several employees. This is also not an accurate process, since your employees can access Adobe applications from several Internet connections.
On a side note, sending a best practice email to all employees (from Info Security team) stating that everyone must access Adobe applications only after connecting to VPN. With this case, Alternative 1 would be effective!
Best,
Kishore