You can perform various basic tasks when working with access rules in the forwarding ruleset.
Edit Access Rules
Edit access rules by either double-clicking the rule or clicking the (Edit) icon on the right of the rule. In the Edit Access Rule window, you can configure all possible configuration settings for the access rule.
Order of Access Rules
The access rules are processed from top to bottom. The first matching rule is executed to process the traffic; all rules located below this rule will not be evaluated. If no rule matches, the last rule in the list applies. This is always the BLOCKALL rule. The BLOCKALL rule blocks all traffic. New access rules are always inserted below the BLOCKALL rule. You need to move the new access rule up the list, so it is evaluated before a more general rule further down the list matches it.
Move Access Rules Up or Down
To change the order in which the access rules are evaluated:
- Go to FIREWALL > Access Rules.
- Drag rules up or down in the table. If you want a rule to be executed, drag it above the BLOCKALL rule.
- After you finish adjusting the order of the access rules, click Save. Otherwise, your changes will not take effect.
Clone Access Rules
If you want to duplicate an access rule, click the (Copy) icon on the right of the rule. A copy of the rule is inserted at the bottom of the ruleset, with COPY appended to the rule name. You can drag it above the location where you want the new rule to take effect. After you finish adjusting the order of the access rules, click Save. Otherwise, your changes will not take effect.
Delete Access Rules
To delete an access rule, click the (Delete) icon on the right of the rule. The action dialog opens. Click OK to confirm the deletion.
Deactivate Access Rules
If you want to temporarily disable an access rule, select the check box in the Disabled column. Until the rule is reactivated, it is not evaluated by the firewall. If you want to create temporary rules (e.g., for administrative SSH access), use schedule objects instead. For more information, see Schedule Objects.