How to add 'Internet' object to a policy.

[SecdetKrypton]

I want to create a policy and use as destination the cloud 'Internet', but not the object 'all_Internet' — I want the cloud Internet.

[Vincent_Bacher]

I'm a bit lost. Could you please explain exactly what you mean by “cloud internet”?

[Danny]

Properly defining the Internet within a security policy

[TurgutKaplanogl · Accepted solution]

More details are needed regarding your question but my assumption is that you want to use the Internet object coming from the App & URL blade. For that you need to enable the Application & URL feature in the policy.

In addition you also need to enable Application Control and if you have the license URL Filtering on the Cluster/Gateway object. Depending on the usage scenario, either both of them or only one of them may be sufficient.

Alternatively if there is a licensing limitation instead of using the Internet object you can assign a Zone to the external interface and use that Zone as the Internet object.

[SecdetKrypton]

Thanks to everyone, indeed the cloud symbol used to represent the internet—I managed to obtain it by enabling URL filtering and app control directly in the rule base policy configurations I had. Thanks.

[Chris_Atkinson · Accepted solution]

Which object(s) you can use depends on the enabled blades.

The Internet object as described would usually require AppC / URLF blades.

[the_rock]

Chris is 100% correct...you need urlf/appc blades enabled for that.

[Vincent_Bacher]

One thing that still puzzles me is that SK specifically refers to the ‘cloud internet’ rather than simply the ‘internet’.

[the_rock]

I find that interesting as well.

[Bob_Zimmerman]

Presumably talking about the object which has a cloud as its icon. This is the object which requires App Control/URL Filtering to be enabled.