Policies

The Policies page (/policies) is where you define the rules that govern network traffic across your organization. Each policy specifies an action, direction, protocol, port range, and scope — and can target specific applications by ID.

Adding a Policy

Click Add Policy in the top-right toolbar to open the create form. The form is pre-populated with your organization's existing policy tags.

Filtering

The policy table provides five independent filter dimensions:

Filter	Description
Action	Filter by `allow` or `block`
Direction	Filter by `inbound` or `outbound`
Protocol	Filter by network protocol (e.g. TCP, UDP, ICMP)
Tags	Filter by assigned policy tags
Updated by	Filter by the team member who last modified the policy

Each filter chip displays a count so you can see the distribution before applying.

Table Columns

Column	Description
Title	Policy name
Tags	Labels assigned to the policy
Source	Source address or CIDR range
Source Port	Source port or port range
Destination	Destination address or CIDR range
Destination Port	Destination port or port range
Protocol	Network protocol (TCP, UDP, ICMP, Any)
Action	`allow` or `block`
Direction	`inbound` or `outbound`
App ID	Application identifier for L7 policy matching
Weight	Evaluation priority — lower weight = higher priority
Throttle Rate	Optional rate limit applied when the rule matches
Visibility	Whether the policy is visible across the organization
Created / Updated	Timestamps and acting user

Policy Detail

Opening a policy shows its full configuration and four assignment tabs:

Tab	Description
Device Assignments	Individual devices this policy is applied to
Device Tag Assignments	Device tag selectors — all matching devices inherit the policy
Member Assignments	Individual users this policy applies to
Team Assignments	Teams whose members inherit this policy

Policy Detail — inspect and edit an individual policy
Metrics — observe the real-world effect of your policies

Adding a Policy

Filtering

Table Columns

Policy Detail

Related

On this page