Configure Network Zones to Enforce a Trusted Boundary

Configure network zones, register trusted proxies, and use blocklists and security policies to enforce perimeter security.

Cancel Apply

rate limit

Code not recognized.

About this course

Course snapshot

Course summary

Requests from unexpected locations or anonymizing proxies can reach your sign-in page before policies evaluate them. This course shows administrators how to define trusted boundaries with network zones, register trusted proxies so the identity provider sees the source client IP, and use network zones in security policies to control access.

What skills does the course cover?

  • Explain the purpose of trusted proxies in identifying the originating client IP address.
  • Configure IP, dynamic, and enhanced dynamic network zones to define trusted boundaries.
  • Use network zones in blocklists and security policies to control access.

Common questions addressed in the course

Why register a trusted proxy?
Without a registered trusted proxy, the identity provider sees intermediate server IP addresses instead of the user's actual location, weakening location-based rules, risk scoring, and threat detection.

How does a blocklist differ from a network zone used in a security policy?

A blocklist drops traffic during pre-authentication with an HTTP 403 Forbidden response before the sign-in page loads. A network zone in a security policy evaluates authenticated traffic and determines whether to allow or deny authentication.

About this course

Course snapshot

Course summary

Requests from unexpected locations or anonymizing proxies can reach your sign-in page before policies evaluate them. This course shows administrators how to define trusted boundaries with network zones, register trusted proxies so the identity provider sees the source client IP, and use network zones in security policies to control access.

What skills does the course cover?

  • Explain the purpose of trusted proxies in identifying the originating client IP address.
  • Configure IP, dynamic, and enhanced dynamic network zones to define trusted boundaries.
  • Use network zones in blocklists and security policies to control access.

Common questions addressed in the course

Why register a trusted proxy?
Without a registered trusted proxy, the identity provider sees intermediate server IP addresses instead of the user's actual location, weakening location-based rules, risk scoring, and threat detection.

How does a blocklist differ from a network zone used in a security policy?

A blocklist drops traffic during pre-authentication with an HTTP 403 Forbidden response before the sign-in page loads. A network zone in a security policy evaluates authenticated traffic and determines whether to allow or deny authentication.