The action of the first security policy rule that matches the traffic is applied to the
packet. If there is no matching rules, the packet is dropped. The rules are matched from
top to bottom, so it is a good idea to place more specific rules near the top of the
list.
Steps to change the security policy rule order:
-
Select Secure Edge > Security
Policy.
The Secure Edge Policy page is displayed with a
list of security policy rules.
-
Click the security policy rule that you want to reorder.
-
Click More, and select any of the following options to
change the rule ordering:
-
Move Top
-
Move Up
-
Move Down
-
Move Bottom
The modified rule order appears on the Secure Edge Policy
page.
-
Preview and deploy the policy with the reordered rules. For details, see Deploy Secure Edge Policies