https://live.paloaltonetworks.com/t5/general-topics/site-access/m-p/580122#M116215 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/284777">@m.maldonado</a>&nbsp;,</P> <P>&nbsp;</P> <P>You will have to create separate policies for each group to control access to specific destinations.&nbsp;</P> Tue, 12 Mar 2024 22:13:08 GMT JayGolf 2024-03-12T22:13:08Z https://live.paloaltonetworks.com/t5/general-topics/site-access/m-p/580083#M116212 <P>I am in the process of locking down access to certain sites on the internet and We have certain AD groups that are designated for access. I was wondering if there was a way to create one rule that will allow AD Group1 and AD Group 2 to their respectrive sites but not let them go to each other site. I am trying to keep the policies down to a minimum for ease of use and management. If I have to create individual rules for site access, so be it but was wondering if it could be done</P> Tue, 12 Mar 2024 16:28:00 GMT https://live.paloaltonetworks.com/t5/general-topics/site-access/m-p/580083#M116212 m.maldonado 2024-03-12T16:28:00Z https://live.paloaltonetworks.com/t5/general-topics/site-access/m-p/580122#M116215 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/284777">@m.maldonado</a>&nbsp;,</P> <P>&nbsp;</P> <P>You will have to create separate policies for each group to control access to specific destinations.&nbsp;</P> Tue, 12 Mar 2024 22:13:08 GMT https://live.paloaltonetworks.com/t5/general-topics/site-access/m-p/580122#M116215 JayGolf 2024-03-12T22:13:08Z