| Internal Network Group |
Contains one or more ipNetwork objects that define a range of IP addresses which are subject to any security policies in which the network group is a member. |
| External Network Group |
Contains one or more ipNetwork objects that define a range of IP addresses which are exempted from any security policies in which the network group is a member. IP addresses defined in ipNetwork objects that are not members of an External Network Group are subject to any policy in which the External Network Group is a member. |