> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/nemoclaw/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/nemoclaw/_mcp/server.

# Customize the Sandbox Network Policy

> Choose the supported workflow for changing sandbox network access.

Choose the policy workflow that matches the scope and persistence of the network access change.
NemoClaw declares sandbox policy in YAML, and [NVIDIA OpenShell](https://github.com/NVIDIA/OpenShell) enforces it at runtime.

| Goal                                                     | Use this workflow                                                                       |
| -------------------------------------------------------- | --------------------------------------------------------------------------------------- |
| Change every future sandbox for an agent                 | [Change the Baseline Network Policy](configure-policies/change-baseline-network-policy) |
| Add or remove a maintained preset for one sandbox        | [Apply Policy Presets](configure-policies/apply-policy-presets)                         |
| Add a reviewed endpoint that no maintained preset covers | [Create Custom Policy Presets](configure-policies/create-custom-policy-presets)         |
| Replace the complete live policy                         | [Replace the Live Network Policy](configure-policies/replace-live-network-policy)       |
| Approve or deny one blocked request                      | [Approve or Deny Network Requests](approve-network-requests)                            |

If a sandbox needs an HTTP service on the host, expose the service on a host IP that the OpenShell gateway can reach.
Apply a custom preset with `nemo-deepagents <sandbox> policy add --from-file`.
Do not rely on `host.docker.internal` as a general host-service path because it bypasses the OpenShell policy path and may not be reachable.
Refer to [Agent cannot reach a host-side HTTP service](../reference/troubleshooting#agent-cannot-reach-a-host-side-http-service).

Adding a host to the egress policy permits a connection only when the endpoint, port, method, and binary rules match.
OpenShell applies SSRF protection separately.
It can deny a request when the final address resolves to a loopback, private, link-local, or blocked internal range.
If a package installer or browser download still fails after you allow the public host, install the binary at build time.
Use [`nemo-deepagents onboard --from`](../reference/commands#--from-dockerfile) instead of runtime egress.

## Static Changes

<a id="prerequisites" />

<a id="edit-the-policy-file" />

<a id="re-run-onboard" />

<a id="verify-the-policy" />

Static changes modify the policy source that NemoClaw reads during sandbox creation.
Follow [Change the Baseline Network Policy](configure-policies/change-baseline-network-policy) to edit the agent policy file, rerun onboarding, and verify the result.

## Dynamic Changes

<a id="scope-of-dynamic-changes" />

<a id="add-a-preset-file-with-policy-add-recommended" />

Dynamic changes update a running sandbox.
Use [Apply Policy Presets](configure-policies/apply-policy-presets) for reviewed additions that NemoClaw records and replays.

<a id="approve-requests-interactively" />

Use [Approve or Deny Network Requests](approve-network-requests) for one-off access.
Use [Replace the Live Network Policy](configure-policies/replace-live-network-policy) only when a preset cannot express the complete change.

## Policy Presets

Maintained policy presets cover common integrations and package services.
Follow [Apply Policy Presets](configure-policies/apply-policy-presets) to preview, apply, reapply, list, or remove them.
Review [Network Policies](../reference/network-policies#policy-tiers) for the maintained presets available to Deep Agents.

## Custom Preset Files

<a id="authoring" />

<a id="apply-a-single-file" />

<a id="apply-every-file-in-a-directory" />

<a id="remove-a-custom-preset" />

Custom preset files add reviewed endpoint access without changing the baseline.
Follow [Create Custom Policy Presets](configure-policies/create-custom-policy-presets) to author, validate, apply, and remove a custom preset.

## Live Policy Replacement

<a id="export-edit-and-set-the-base-policy" />

OpenShell `policy set` replaces the complete live policy.
Follow [Replace the Live Network Policy](configure-policies/replace-live-network-policy) to export the round-trippable base, preserve existing entries, and apply a validated replacement.

## Related Topics

* [Network Policies](../reference/network-policies) is the canonical policy reference.
* [OpenShell Policy Schema](https://docs.nvidia.com/openshell/latest/reference/policy-schema.html) provides the complete YAML schema.
* [OpenShell Sandbox Policies](https://docs.nvidia.com/openshell/latest/sandboxes/policies.html) explains OpenShell-layer policy iteration.