Network Security
Rule Order for Web Security and Security Policy
Table of Contents
Rule Order for Web Security and Security Policy
Web Access policy rules your create in folder are inherited by child folders, as are any
other rules in your configuration. When GlobalProtect, Explicit Proxy, or Remote
Networks are heirs of Web Security policy, Web Security rules go to the top of the
rulebase. Security policies from higher-level parent folders get priority over Web
Access policies in lower-level child folders. Default policies are always placed at the
bottom and below any Web Security rules in a child folder.
Here's the order of rule enforcement:
Global - Web Access Policies Global - Security Policies |
Prisma Access - Web Access PoliciesPrisma Access - Security Policies (pre-rules) |
Remote Networks - Web Access Policies Remote Networks - Security Policies |
Prisma Access - Security Policies (post-rules) |
Global - Security Policies (post-rules) |
