This article clarifies whether it is possible to block specific Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) ports on an Okta tenant (the Okta cloud service).
- Network Zone
- IP Blocking
- Port Blocking
It is not possible to directly block specific TCP or UDP ports on an Okta tenant.
As a Software-as-a-Service (SaaS) platform, Okta's security controls operate at the application and access policy layers, not at the network firewall layer. The underlying host and network infrastructure are managed by Okta.
Okta's internal infrastructure firewall protects the service, exposing only necessary ports, such as 443, to the public internet.
Inbound traffic can be controlled using Network Zones, which filter access based on source Internet Protocol (IP) address, geographic location, and IP type, rather than by destination port.
