avshch (BCRC) asked a question.
Blocking access to okta org from VPN providers
Hello,
We have a requirement to block access to our okta org from VPN providers. Is there any feature can be used to meet the requirement?
avshch likes this.
- Paul S. (Okta, Inc.)
Hello @avshch (BCRC) Thank you for posting on our Community page!
This can be done from the Network Zones, please see our documentation on this below:
Note: If these features are not enabled on your Organisation you will need to open a case with Support to have these enabled.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Expand Post - Paul S. (Okta, Inc.)
Hi @avshch (BCRC) Yes, Okta Dynamic Zones can differentiate between enterprise and consumer VPN providers, although it does so indirectly through IP reputation and network categorization rather than by explicitly naming the VPN brands.
Okta relies on third-party IP reputation vendors to classify network traffic. Because consumer and enterprise VPNs handle traffic differently at the network level, Okta can effectively tell them apart using IP Types and ASNs (Autonomous System Numbers).
Please see our article below:
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Expand Post
Hello @avshch (BCRC) Thank you for posting on our Community page!
This can be done from the Network Zones, please see our documentation on this below:
https://support.okta.com/help/s/article/how-to-block-ips-based-on-proxy-using-enhanced-dynamic-zone?language=en_US
Note: If these features are not enabled on your Organisation you will need to open a case with Support to have these enabled.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.