SaFi Bank Space : Cloudflare VPN Access Rules

Overview:

Okta is used as an identity provider, which has the users and user groups. We use those information in Cloudflare to provision access trough the VPN. Currently there is no option to create rules trough code, so they have to be created manually.

How to create rules (Policies):

1. Login in to the dashboard

2. Go to Gateway - Policies - Network

3. 

   Select Create a policy and fill it out

   1. In Step 1 select unique name and add a description if necessary

   2. In Step 2 as a selector select destination IP and User Group

   3. In Step 3 select an action that should be taken, if the action is allow set warp enforcement for 8 hours

      

4. Save the Policy, wait a while for it to be applied then you can test it.