How to setup (network) policies

Timoline,

the Firewall processes the rule from top to down, so the first matched rule, traffic get blocked or allowed.
To match the second rule, you have to apply the policy to different user, network objects, services from the previous rule.

Luk

Firewalls works using the concept: "first rule matched, traffic is processed".
Please make an example of what you are trying to achieve.

Luk

Hi Luk

for example

Policy A: Lan->Wan - web category filter - adv block, and report on
Policy B: Lan->Wan - web category filter - social allow, but report off

Timoline,

you cannot accomplish this.

Luk

As Luk said it impossible to do it this way, although you can try something different. Go to Protection -> Web Protection -> Web Filter Policies and create a custom Policy.

You can then add Web Categories, File types, URL groups and Dynamic Categories to the policy. For each item you can specify Allow or Deny.

Then put the web filter policy in your Network Policy. Unfortunately you can't selectively turn on / off logging for specific web filter items.

As Luk said it impossible to do it this way, although you can try something different. Go to Protection -> Web Protection -> Web Filter Policies and create a custom Policy.

You can then add Web Categories, File types, URL groups and Dynamic Categories to the policy. For each item you can specify Allow or Deny.

Then put the web filter policy in your Network Policy. Unfortunately you can't selectively turn on / off logging for specific web filter items.