Rules are processed in top-to-bottom ordering. You can change the order of the rules in the list.

For any traffic attempting to pass through the firewall, the packet information is subjected to the rules in the order shown in the rules table, beginning at the top and proceeding to the default rules at the bottom. In some cases, the order of precedence of two or more rules might be important in determining the traffic flow.

You can move a custom rule up or down in the table. The default rule is always at the bottom of the table and cannot be moved.


  1. Select Security > Distributed Firewall from the navigation panel.
  2. Click the General tab for L3 rules or the Ethernet tab for L2 rules.
  3. Select the rule and click the Move Up or Move Down icon on the menu bar.
  4. Click Publish.