Blocklisting an Entire Zone in Okta
Nov 28, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Applies To
- Okta environments where the IP Zones feature is enabled
- Okta Classic Engine
Cause
To restrict access from entire zones, the zone needs to be marked as blocklisted.
Solution
To blocklist an entire zone, follow the steps or video below:
-
Log in to the Okta Admin Console.
-
Go to Security > Networks.
-
Click Add Zone.
-
Enter the Zone Name and Description.
-
Under Gateway IPs, add the IP address range of the zone to the blocklist.
-
Check the box next to Block access from IPs matching conditions listed in this zone.
-
Click Save.
NOTE: When the Multiple Network Zones feature is activated, two network zones are automatically generated. One of these can be used for blocklisting IP addresses.
Related References
