Purpose of a group firewall rulex

Question

Hello, 
 what are the group rules of a firewall rule necessary for or what exactly do they do? 
 What influence do the group rule or when a firewall rule is created in a group ? 
 
 Greetings and thanks

LuCar Toni · Answer

The point is: Zone, user based firewall etc. is not invented by Sophos. It is a concept of next generation firewalls. Other vendors do the same. So its not about user friendliness, more likely your background with other products. Somebody coming from UTM (stateful firewall with attached modules) can get confused about this kind of interaction, but luckly, XG can do the same like UTM, if you want.

FormerMember · Answer

Hey, Firewall groups are given for the admin's convenience as admins can group the rules for a similar purpose or source or destination etc.. XG follows a top-down approach when it comes to matching the traffic against the firewall rules. Firewall rules added in the group don't have any influence over the ones which aren&rsquo;t. Whichever rule is matched first (from top to bottom) will be applicable for that specific traffic.

Purpose of a group firewall rulex

Top Replies