Network VirusWall Enforcer assesses endpoints against policies (or criteria in the policies) to identify the ones that pose threats. It also refers to the policies to determine whether to simply monitor or block noncompliant endpoints. With policies, you can prevent outbreaks and keep threats from compromising your network. You can construct policies so that they apply to predefined groups of endpoints or network zones.
When enforcing policies, Network VirusWall Enforcer follows a first-match rule. This means that once it matches a policy to an endpoint, the device will no longer check an endpoint against other policies. Network VirusWall Enforcer only applies the first policy that matches the endpoint. Network VirusWall Enforcer checks endpoints against policies with higher priorities (lower priority number) first.