Scott and vilic, I think that AppCtrl rules aren't considered until after all Firewall rules have been considered. That would mean that AppCtrl could block something allowed by Firewall rules, but not allow something already rejected earlier (refer to #2 in Rulz).
Can anyone confirm that? Can anyone confirm that AppCtrl also comes after IPS? Should I add AppCtrl and IPS to #2?
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
Scott and vilic, I think that AppCtrl rules aren't considered until after all Firewall rules have been considered. That would mean that AppCtrl could block something allowed by Firewall rules, but not allow something already rejected earlier (refer to #2 in Rulz).
Can anyone confirm that? Can anyone confirm that AppCtrl also comes after IPS? Should I add AppCtrl and IPS to #2?
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
