How to setup (network) policies

Question

Hello, 
 I'm trying to setup some policies: 
 Currently i'm trying to setup it like this way: 1 Policy A - Lan-> Wan - block web category filter A 2 Policy B - Lan-> Wan - block web category filter B 3 default network policy - Lan ->Wan - Default open up everything 
 Only Policy A is working...........when i disable this policy A, Policy B is working Howto get Policy A and B working both? Or isn't it working like this logic?

lferrara · Accepted Answer

Firewalls works using the concept: "first rule matched, traffic is processed". 
Please make an example of what you are trying to achieve. 
 
Luk

lferrara · Answer

Timoline, 
 
you cannot accomplish this. 
 
Luk

Slawski · Answer

As Luk said it impossible to do it this way, although you can try something different. Go to Protection -> Web Protection -> Web Filter Policies and create a custom Policy. 
 
You can then add Web Categories, File types, URL groups and Dynamic Categories to the policy. For each item you can specify Allow or Deny. 
 
Then put the web filter policy in your Network Policy. Unfortunately you can't selectively turn on / off logging for specific web filter items.

lferrara · Answer

Timoline, 
 
the Firewall processes the rule from top to down, so the first matched rule, traffic get blocked or allowed. 
To match the second rule, you have to apply the policy to different user, network objects, services from the previous rule. 
 
Luk