Security policies are applied according to their weight - a security policy with a higher weight has a higher priority. When you move a policy up or down in the table, its weight is adjusted accordingly.

Multiple security policies may be applied to a virtual machine either because the security group that contains the virtual machine is associated with multiple policies or because the virtual machine is part of multiple security groups associated with different policies. If there is a conflict between services grouped with each policy, the weight of the policy determines the services that will be applied to the virtual machine. For example, say policy 1 blocks internet access and has a weight value of 1000 while policy 2 allows internet access and has a weight value of 2000. In this particular case, policy 2 has a higher weight and hence the virtual machine will be allowed internet access.

Procedure

  1. In the vSphere Web Client, navigate to Networking & Security > Security > Service Composer.
  2. Click the Security Policies tab.
  3. Click Manage or the Manage Priority (manage) icon.
  4. In the Manage Priority dialog box, select the security policy that you want to change the priority for and click Move Up (move up) or Move Down (move).
  5. If you want to move object to a particular rank, click Move To.
    Enter the required rank, and click the green check mark or OK.
    Weight is recalculated accordingly to the new rank.
  6. If you want to edit weight of the policy, click Edit Weight .
    Enter the required weight, and click the green check mark or OK.
  7. Click OK.