You can create internal network groups only in the internal network group container. There is no limit on the number of internal network groups.
Internal groups contain ipNetwork objects that define the IP addresses explicitly effected by the associated policy.