How to ACL differ from Firewall rules

Hello,

Good day and thanks for reaching out to Sophos Community

Could you confirm the direction (source and destination) of the drop firewall rule you created? 

Device ACL is there to simplify access from zones which are enabled and disabled. Then you can use Local service ACL exception rule for those who will need to have access excempted from the device ACL. 

Hope this helps. Have a nice day and thank you for choosing Sophos

Cheers,

Hello 

Yes the Direction was Source : Any Networks: Any 

                                    Destination: Any  Services: Any 

Basically I had created a any to any to any Service and Dropped it but no effect until i disabled the the ACL lan access for dns, ping etc...Though now i have lost access to the firewall itself which i will have to reset to gain access port:4444 but this should have happened otherwise when the Any Drop rule was created ..... but now i understand that the Exception rule has to be created in ACL .... I have also heard that once a Any to Any Drop rule is created the ACL is ignored...

Regards ....

Hello, 

Yes, instead of Denying all the traffic using Firewall Rules just to restrict device access from zones, it's better to use Device ACL restriction by zone and configure Local ACL service exception for designated access.

Cheers,

Hello there..I'm not interested actually in acl because it serves no much purpose..if acl just works that way then what is the use of firewall rules... obviously firewall rules are more complicated then jus acl ....so how do I make firewall rules take precedence over acl...