Software Secure Access
Activity Manage

Cisco Secure Access Help Get Started With Internet Access Rules

Last updated: Aug 07, 2025

Get Started With Internet Access Rules

Internet access rules specify how traffic to internet destinations should be handled.

Traffic to internet destinations is allowed by default. You must create rules to block access to internet destinations, either for acceptable use or security reasons; to warn users before you allow access; or to isolate specified internet traffic.

  1. Plan your internet access rules

    Plan your rule set so you get the results you expect. Read the documentation and familiarize yourself with the various components that make up rules.

  2. Create rule components.

    You will assemble rules largely from components, for example source, destination, and security control components. See Components for Internet Access Rules for more information.

  3. Specify rule defaults.

    New rules will use the default security controls and other settings that you specify on the Rule Defaults page. See Default Settings for Internet Access Rules for more information.

  4. Edit the default internet access rule

    Traffic to internet destinations that does not match any other internet access rule in the policy will be handled. See Edit the Default Access Rules for more information.

  5. Add internet access rules

    See Add an Internet Access Rule for more information.

  6. Review the global settings

    Normally you will not change these settings for internet access rules, but you should be familiar with their impact. See Global Settings for Internet Access Rules for information.

  7. Ensure that rules match encrypted traffic

    See Important! Ensure Rule Matching for Encrypted Internet Traffic fore more information.

  8. Review the rule order

    Make sure the order of the rules on the Policy page will have the results you expect. See Edit the Order of the Rules on the Policy Page for more information.

  9. Test your internet access rules