Guidelines: Adding Destinations on Internet Access Rules
- We recommend that you pre-configure destinations in Secure Access. For descriptions and links to configuration instructions for each component type, see Components for Internet Access Rules.
- You can also specify web sites by their content categories, individual web application, or web application categories without creating content category lists or application lists. On an internet rule, choose Content Categories or Application Categories.
- Depending on the destinations you select (for example certain applications, application lists, or application categories) other options may appear in the rule.
- If you see an option to Select All, this selects all existing items in the group at the time you select it, but the rule will not include items added to the group in future.
- When you select a list or group, entities that are added to the list or group in the future are automatically included. For example, if you select a Destination List, any destinations that you add to that destination list later are automatically included.
- If this rule involves tenant controls, you must include the relevant application as a destination in the rule, as well as configuring the applicable tenant control profile and specifying that profile in the Security Controls section of the rule. For more information, see Manage Tenant Control Profiles.
- When specifying applications, it is not possible to search for an application with fewer than three letters in its name—for example, QQ or YY. You must pick the applications manually from the tree under their respective categories or use a wildcard in search—for example, QQ*. This behavior is by design.
For more information, see Add an Internet Access Rule—Pre-Configured Destinations.