How do firewall rules function?
If two identical rules exist, but one is set to Enable communication and the other to Disable communication, the rule set to Disable will be applied.
A rule that is more specific has higher priority than a less specific rule. Whether a rule is more or less specific is determined by the four basic parameters of the rule, which take priority in the following order:
2. Remote address (IP address, subnet, address range, zone)
3. Remote port
4. Local port
Other parameters (direction of communication, protocol) are not taken into account when determining priority of a rule.
The rules will be applied based on the priority of parameters they contain. Once a rule has been applied to a specific communication, no other rules can be applied to it.
Consider a situation including these two rules:
Rule 1: Block communication with shared network drives.
Rule 2: Enable communication with shared network drives in the trusted zone.
The priority of rule 2 is higher than rule 1 because rule 2 is more specific. Based on priority, attempts to establish communication with any shared network drives in the trusted zone will be allowed. Communication with shared network drives outside the trusted zone will be blocked.