What is the difference between Group A versus Group B in Cloud Policy?
What conditions require a custom policy rule to be in Group A or Group B?
What Actions are OUTBOUND Actions?
(All OUTBOUND actions can only be in Group "A")
What Actions are INBOUND Actions?
(INBOUND actions can be in either Group "A" or Group "B")
Any "Limits" that specifiy "File Types", or any *complex* Verdict (Allow with Coaching, or Block with Password Override) can ONLY be in Group "B".
Non-complex Verdicts (simple "Allow" or simple "Block") can be in either Group "A" or Group "B".
If you try to mix an OUTBOUND action (Group "A" only) with a complex Verdict (Group "B" only), you'll get one of these warnings:
Group "B" only: "Limits" where a "File Type" criteria is listed: