SvcBancsAPITestT.08169 (Customer) asked a question.
Network Zones with ZScaler & PRISMA Cloud
I have an application that I restrict access by Group Membership & IP address.
Some of my clients use ZScaler, so if I add their source IPs to the Gateway IP section of the Zone and the ZScaler addresses to the trusted proxy to enforce my policy of GroupMembership not in Zone, Deny policy, that should work. Okta even provides a link to ZScaler IP lists to do this via copy/paste.
The issue is when I have clients that use PRISMA.
From what I understand, their IP space is highly dynamic and changes daily, if not more often. Is there a way to set PRISMA as the Trusted Proxy for a specific Zone?
Hi Greg,
Unfortunately, having PRISMA as a Trusted Proxy for a specific zone cannot be done with Okta.
Thank you,
Andreea Pomirleanu