Define Network Zones Based on Autonomous System Number (ASN)
Mar 3, 2026
Okta Classic Engine
Okta Identity Engine
Network Zones
Overview
This article describes how to define network zones based on Autonomous System Number (ASN).
Applies To
- Autonomous System Number (ASN)
- Network Zones
- Blocklists
- Access policies
Solution
Please follow the below video or steps:
To define network zones based on ASN, please ask support to enable the ASN Dynamic Zone feature (please consult the Okta Account Executive for license requirements)
Once the feature is enabled, follow these steps:
-
Navigate to Security > Networks.
-
Select Add Zone > Dynamic Zone.
-
Enter an appropriate zone name.
-
Select the IP type and location based on the specific use case.
-
Select Blocklist to prevent access to the tenant from the specified network.
-
-
Locate the ASN using a third-party tool and enter the value into the ISP ASNs field.
-
NOTE: Okta automatically removes the "AS" prefix if it is entered.
-
-
Click Save.
