WSM User Guide - WatchGuard Technologies

Setting Policy Precedencesequence to compare the most general traffic rule of one policy with the most general traffic rule of asecond policy.If Policy Manager cannot set the precedence when it compares the traffic rules, it examines the firewallactions.Comparing firewall actionsPolicy Manager compares the firewall actions of two policies to set precedence. Precedence of firewallactions from highest to lowest is:1 Denied or Denied (send reset)2 Allowed proxy3 Allowed filterIf Policy Manager cannot set the precedence when it compares the firewall actions, it examines theschedules.Comparing schedulesPolicy Manager compares the schedules of two policies to set precedence. Precedence of schedulesfrom highest to lowest is:1 Always off2 Sometimes on3 Always onIf Policy Manager cannot set the precedence when it compares the schedules, it examines the policynames.Comparing type and namesIf the two policies do not match any other precedence criteria, Policy Manager sorts the policies inalphanumeric sequence. First it uses the policy type. Then it uses the policy name. Because no two policiescan be the same type and have the same name, this is the last criteria for precedence.Setting precedence manuallyTo switch to manual-order mode, select View > Auto-order mode so that the checkmark disappears.You are asked to confirm if you want to switch to auto-order mode.To change the order of policies:• Select the policy whose order you want to change. Click the up or down arrow on the far rightside of the Policy Manager toolbar.or• Select the policy whose order you want to change and drag it to its new location.User Guide 159