Network security: Cannot activate an empty network policy (Pending)¶

Network policies are activated on an account, user, or integration to control incoming network traffic.

This change behaves as follows:

Before the change:

An administrator can activate a network policy on an account, user, or integration even if that network policy and its attached network rules do not contain network identifiers.

After the change:

A network policy or its attached network rules must contain at least one allowed or blocked network identifier when it is activated. Attempting to activate an empty network policy results in an error.

This change is being made to eliminate confusion about whether an empty network policy allows or blocks traffic. Administrators must explicitly allow or block identifiers, including whether to allow or block the wildcard range 0.0.0.0/0.

Ref: 1761