Understanding the Add Policy Panel
The Add Policy panel is where you build an access policy. It asks three things: who the policy covers, what they are trying to reach, and whether to allow it.
The panel is long, but it follows the shape of the rule you are writing. Reading it as source, destination, and action makes the length manageable.
Table 1. What each section of the panel is for
| Section | What you decide there |
|---|---|
| Policy Name and Description | What to call the policy. The name appears in the policy list and in the dashboard's policy figures, so make it describe what the policy does. |
| Source | Who the policy applies to. Choose an identity type, then add the groups or users it covers. You can also narrow it by network location. |
| Destination | What they are reaching. Choose a gateway connector, then the specific tools within it the policy governs. |
| Action | Whether a match allows the request or denies it. You can also select Notify to send a notification when the rule matches, regardless of which action you choose.The **Action** column shows only whether a policy allows or denies. It does not show whether **Notify** is selected. To check that, open the policy. |
Leaving a section unset
A section you leave alone matches everything. Setting the gateway connector to Any means the policy applies to every connector, and leaving the source as All included means it applies to everyone.
That makes broad policies quick to write, but it also makes them easy to write by accident. Check both sections before you save.