Using Network and Service Objects for Destinations in Access Rules
You can select Network and Service Objects for destinations on the internet and private access rules in the Access policy. Destinations are the To side of the access rule on the Access policy.
- You can select at most 10 Network Objects and 10 Service Objects for a destination in an internet or private access rule.
- You can select at most 10 Network Groups and 10 Service Groups for a destination in an internet or private access rule where each group has no more 50000 objects in the group.
- A VPN profile that includes the configuration of a VPN split tunnel supports Network Objects only.
- To select Network Objects and Service Objects in a rule, the rule must have either the
alloworblockaction. - You can use logical AND to combine Network Objects and Groups and Service Objects and Groups for destinations on both internet and private access rules in the Access policy.