Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 41 subscribers
  • Views 7962 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Manager - Cannot re-order firewall rules

ken9000

I can create firewall rules in Firewall Manager but I cannot re-order them as I can on the devices themselves. We want the same rules to apply to all devices in the same order.



This thread was automatically locked due to age.
Parents
  • 0

    Hi ken,

    User can't reorder firewall rules in SFM/CFM from group level and device level of SFM/CFM like on the devices themselves.

    You can create firewall rule in Template and push template to all devices. Below is the behavior when you apply firewall rule from Template.

    • By Default all rules will be added at bottom position.
    • Rules which are already exists on SF its order will not change, as in update event rule positioning is not possible.

    Ravi

Reply
  • 0

    Hi ken,

    User can't reorder firewall rules in SFM/CFM from group level and device level of SFM/CFM like on the devices themselves.

    You can create firewall rule in Template and push template to all devices. Below is the behavior when you apply firewall rule from Template.

    • By Default all rules will be added at bottom position.
    • Rules which are already exists on SF its order will not change, as in update event rule positioning is not possible.

    Ravi

Children
  • 0 in reply to RaviPatel

    Thanks. It would be extremely helpful if you guys could publish a document on what can be done in SFM versus what still has to be done on the firewalls themselves. SFM is marketed as a "one stop shop" for managing multiple devices but it's really not.

Unfiltered HTML