Web Access policy rules your create in folder are inherited by child folders, as are any
other rules in your configuration. When GlobalProtect, Explicit Proxy, or Remote
Networks are heirs of Web Security policy, Web Security rules go to the top of the
rulebase. Security policies from higher-level parent folders get priority over Web
Access policies in lower-level child folders. Default policies are always placed at the
bottom and below any Web Security rules in a child folder.