Creating a private access rule

Procedure

1. On the Secure Access Rules screen, click the Private Access tab and then click Create Rule.
   The rule configuration screen appears with the Internal app access rule template selected.
2. Specify a unique name and a description for the rule.
3. (Optional) To enable or disable the rule, click the toggle next to Status.

   Tip You can also enable or disable rules on the Secure Access Rules screen.

4. Configure the following rule settings.

   Rule setting	Description	Options
   Source	The users, devices, and locations that the rule applies to	Users/User groups Specify users and groups from your IAM system or defined private IP groups. Note If you have configured more than one IAM system, the IAM system with SSO enabled applies.
   		Device posture profile Select the device posture profile to include devices in the rule enforcement. Note This option only applies to access initiated with the Secure Access Module. This means that end users using the user portal can access private applications regardless of the security posture of the their devices. To add a device posture profile, click Add custom device posture profile.
   		Locations Specify public/home network locations defined by IP address groups or geographic regions. Locations identify roaming users, such as users connecting to public Wi-Fi networks or working from home. Tip To define a new public/home network location using one or more IP addresses, click Add public IP address group.
   Destination	The internal apps that the rule applies to	Applications Specify previously configured internal applications. Tip To add an internal app, click Add Internal Application on the Select Apps screen. For more information, see Adding an internal application to Private Access.
   Schedule	The weekly period that the rule is applied	To configure the recurrence of the schedule, select Only apply the rule during the specified period, and then select a start date and end date. Note The schedule uses the defined time zone of the console.
   Action	The action taken when the rule is triggered	Access control Allow, block, or monitor access to internal applications. Note Select Monitor Internal App Access to allow the internet access but log the activity. For more information about actions, see Zero Trust actions.

5. Click Save.
   The rule is successfully created and listed on the Private Access screen.