Set up DNS exceptions

The IT administrator may want to exclude access to some subdomains from the users. They can disable these subdomains from being intercepted by the EAA Client by setting up a DNS exception list.

How to

  1. Click Settings > Advanced Settings for your application.
  2. In the EAAClient parameters, under Domain exception list, enter the names of the subdomains that need to be excluded from users.
    This will deny users in the domain from accessing these subdomains.


The IT administrator wants to exclude payroll, benefits, and a confidential project called project1 under devops subdomains from all users. Under General tab, under Application identity settings, enter the top-level domain, of the wildcard application, * as the internal host for Destination 1, as shown here:
Then specify the subdomains in the Domain exception list under EAAClient parameters as shown here:

Note: The Domain exception list only supports exact matches. Regular expression pattern matches are not supported.

Next steps

Deploy the application