Security policies can be as general or specific as needed. The policy rules are compared against the incoming traffic in sequence, and because the first rule that matches the traffic is applied, the more specific rules must precede the more general ones. For example, a rule for a single application must precede a rule for all applications if all other traffic-related settings are the same. If the traffic does not match any of the rules, the traffic is blocked.

To create policy rules, first create some policy objects, which are used to define the parameters of the policy rules. For more information, see About Policy Rules.

The Policies page at Policies → Rules allows users to: