Rule and Policies Order Best Practice

Hello Fandi,

Thanks for reaching out to Sophos Community. 

You can configure firewall rules in many ways, depending on your network configuration. However, we recommend you to follow these Sophos Firewall best practices when configuring Sophos Firewall to protect your network.: https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/StartupHelp/RuleBestPractice/index.html

Hope this helps. Have a nice day and thank you for choosing Sophos.

Cheers,

Thanks Raphael Alganes . Those article is not spesific describe about Rule and Policies order.
But also good advice.

Hi,

there are no specific policy or rule order that you can apply because each site has different requirements.

My method

1/. all block rules to the top of the rule list

2/. high priority traffic next eg VoIP

3/. High usage rules so that the rule search process does not take much cpu and does not delay the user access

4/. remainder of traffic based on the number of policies and users.

I hope this gives you somewhere to start.

Ian

Hi,

there are no specific policy or rule order that you can apply because each site has different requirements.

My method

1/. all block rules to the top of the rule list

2/. high priority traffic next eg VoIP

3/. High usage rules so that the rule search process does not take much cpu and does not delay the user access

4/. remainder of traffic based on the number of policies and users.

I hope this gives you somewhere to start.

Ian

Hi rfcat_vk ,

Good point. Thanks for your advice