Change the Order of a Firewall Rule in Manager Mode

Rules are processed in top-to-bottom ordering. You can change the order of the rules in the list.

For any traffic attempting to pass through the firewall, the packet information is subjected to the rules in the order shown in the rules table, beginning at the top and proceeding to the default rules at the bottom. In some cases, the order of precedence of two or more rules might be important in determining the traffic flow.

You can move a custom rule up or down in the table. The default rule is always at the bottom of the table and cannot be moved.

Prerequisites

Verify that Manager mode is selected in the NSX Manager user interface. See NSX Manager. If you do not see the Policy and Manager mode buttons, see Configure User Interface Settings.

Procedure

1. Select Security > Distributed Firewall.
2. Click the General tab for L3 rules or the Ethernet tab for L2 rules.
3. Select the rule and click the Move Up or Move Down icon on the menu bar.
4. Click Publish.