Cisco
Login
Search
Software Secure Access
Activity Manage

Cisco Secure Access Help Get Started With Private Access Rules About Configuring Destinations in Private Access Rules Network and Service Objects on Private Access Rules

Last updated: Aug 07, 2025

Network and Service Objects on Private Access Rules

You can select pre-configured Network Objects and Groups and Service Objects and Groups as destinations on private access rules. When you choose the objects and groups, you have the option to combine the objects and groups with the logical AND operator. For more information, see Combine Destinations with Boolean Logic.


 
If you do not add the logical AND operator with the selected destinations, Secure Access combines the destinations with the logical OR operator. For more information, see Combining Multiple Destinations in a Rule (Boolean Logic).
  1. Navigate to Secure > Access Policy > Add Rule > Private Access.
  2. Navigate to Specify Access and then click on the search bar under To.
  3. Select the Network Objects and Groups or Service Objects and Groups.
    1. Click Select destinations, and then choose the Network Objects and Groups to add to the private access rule.
    2. Click Select destinations, and then choose the Service Objects and Groups to add to the private access rule.
  4. (Optional) Click +AND.
    1. Click on the Select destinations text area.
    2. Choose a destination to combine with the other selected destinations using the logical AND operator. For more information, see AND Destinations: Network and Service Objects.
    3. After you select the objects and groups to use with the AND operator, you can remove the destinations and then add new destinations.

       
      You have to select all destinations at the same time for each side of the AND option. Once selected, you can not go back and add more destinations.
  5. Click Next.
Previous topic Destination Components for Private Access Rules Next topic Composite Destinations for Private Access Rules