Composite Destinations for Private Access Rules
You can define a destination using multiple network address components. All destinations allow connections from authenticated users on the network, including branch networks.
Composite destinations are useful if you need to quickly address a specific issue that arises, for example to immediately allow access to a destination that is being blocked by another rule, or to immediately block access to a problem destination.
Zero-trust connections are not available for destinations that are not configured as private resources.
Private access rules with composite destinations only support the Allow and Block actions.
|
These security controls do not apply to traffic for destinations added directly into a rule.
If destinations include both configured private resources or groups and destinations typed directly into a rule, security controls are applied only to the configured private resources or groups. |