We create Networks and Network Groups to enable or deny access. Networks can be grouped and applied to policies.