diff --git a/public/docs-static/img/overview/create-rule.png b/public/docs-static/img/overview/create-rule.png index 3fb57c38..eaf84143 100644 Binary files a/public/docs-static/img/overview/create-rule.png and b/public/docs-static/img/overview/create-rule.png differ diff --git a/public/docs-static/img/overview/new-rule-list.png b/public/docs-static/img/overview/new-rule-list.png index c30db36f..ea1ccdbf 100644 Binary files a/public/docs-static/img/overview/new-rule-list.png and b/public/docs-static/img/overview/new-rule-list.png differ diff --git a/src/pages/how-to/manage-network-access.mdx b/src/pages/how-to/manage-network-access.mdx index a24eb391..eaa792b5 100644 --- a/src/pages/how-to/manage-network-access.mdx +++ b/src/pages/how-to/manage-network-access.mdx @@ -67,14 +67,21 @@ There is a `Default` policy, which configures a default mesh connection between ## Managing Policies ### Creating Policies -After accessing the `Access Control` > `Policies` tab, click on the `Add policy` button to create a new policy. In the popup, specify source and destination groups, and add Posture Checks if needed. Make sure to set traffic direction only when TCP or UDP protocols are selected. Finally, provide a name and description for your policy. +After accessing the `Access Control` > `Policies` tab, click on the `Add policy` button to create a new policy. +In the popup, specify connection `Source` and `Destination` groups. You can select existing groups or create new ones by entering a name in the input box. + + + We recommend using [identity provider (IdP) integrations](/how-to/idp-sync) to provision your user groups from the IdP. + + +You can limit access to specific protocol and ports by selecting the `Protocol` and providing the port numbers in the `Ports` field. +Starting version `0.48` NetBird supports port ranges in policies, allowing you to specify a range of ports in the format `start-end` (e.g., `8000-9000`). +Make sure to set traffic direction only when TCP or UDP protocols are selected. Finally, provide a name and description for your policy.

high-level-dia

- - -If necessary, you can create new groups simply by entering new names in the input box for either the source or destination lists. +If necessary, you can also add a [posture checks](/how-to/manage-posture-checks) to the policy. Posture checks are used to ensure that the peer meets certain security requirements before allowing it to connect. You can select from predefined posture checks or create custom ones. Once you have finished configuring the policy, click `Add Policy` to save it. You will then see your new policy in the table.