Configuring the order of firewall rules

Firewall rules are applied to traffic packets in descending order, starting with the first rule at the top of the table. By default, firewall rules are displayed in the table in the order of creation. The earlier a rule was created, the higher it is displayed in the table.

You can configure the order in which firewall rules are applied in a firewall template or on a CPE device. When you configure the order in which firewall rules are applied, that order is automatically propagated to all CPE devices that are using the template.

To configure the order in which firewall rules are applied:

1. Edit the order in which firewall rules are applied in one of the following ways:
   • If you want to configure the order in which firewall rules are applied in a firewall template, go to the SD-WAN → Firewall templates menu section, click the template and in the displayed settings area, select the Rules tab.
   • If you want to configure the order in which firewall rules are applied on a CPE device, go to the SD-WAN → CPE menu section, click the device, and in the displayed settings area, select the Firewall settings → Rules tab and select the Override check box.

   A table of firewall rules is displayed.

2. Configure the order in which firewall rules are applied by clicking the Up and Down buttons next to them.
3. In the upper part of the settings area, click Save to save the settings of the firewall template or CPE device.