diff --git a/nemoclaw-blueprint/policies/openclaw-sandbox.yaml b/nemoclaw-blueprint/policies/openclaw-sandbox.yaml
index 1e24cc2c4b7..2f87617aafa 100644
--- a/nemoclaw-blueprint/policies/openclaw-sandbox.yaml
+++ b/nemoclaw-blueprint/policies/openclaw-sandbox.yaml
@@ -57,11 +57,17 @@ network_policies:
           - allow: { method: POST, path: "/**" }
       - host: statsig.anthropic.com
         port: 443
+        protocol: rest
+        enforcement: enforce
+        tls: terminate
         rules:
           - allow: { method: GET, path: "/**" }
           - allow: { method: POST, path: "/**" }
       - host: sentry.io
         port: 443
+        protocol: rest
+        enforcement: enforce
+        tls: terminate
         rules:
           - allow: { method: GET, path: "/**" }
           - allow: { method: POST, path: "/**" }