Move firewall policies

You can use the move command to change the order in which your firewall policies are applied.

In the following example, you have created two policy rules:

config firewall policy

edit filter1

set srcintf any

set dstintf any

set srcaddr rec

set dstaddr internet

set action deny

set status enable

set service service1 service2 service3 service4

set nat disable

next

edit filter2

set srcintf lan

set dstintf wan

set srcaddr wow

set dstaddr internet

set action allow

set status enable

set service service1 service2 service3 service4

set nat disable

next

end

If you want to move policy one after two, you can use either of the following commands:

move filter1 after filter2

or

move filter2 before filter1