Check Point HARMONY R81 - Page 146

Working With Rules
R81 Harmony Endpoint Server Administration Guide|146
Example
This is how the Endpoint Security client applies the rules after you change order of the rules in
the previous example policy.
If there is more than one rule for an Endpoint Security component, the Endpoint Security client
applies the rules in this order:
n
First rule that applies to the user or computer in the "more rule(s)"section.
n
If no rule matches the user or computer, the default rule applies.
Best Practice - Put rules for specified users or computers, in the "more rule(s)"section, above
rules for groups and containers they are members of.
Example 1
Read the comments in the rules.
No Name Applies to Comment
-
Firewall
Default Firewall
settings for the
entire
organization
Entire Organization
This rule applies to
users who do not
belong to the OUs
"Europe" or "US",
and do not belong
to the AD group
"Managers".
- 2 more rules
1 Firewall rule for
Europe and US
Europe
\Directories\example.test.com\Example
US
\Directories\example.test.com\Example
This rule applies to
users who belong
to the OUs
"Europe" and "US".
2 Firewall rule for
managers
Managers
\Directories\example.test.com\Example
This rule applies to
users in the AD
group "Managers"
who do not belong
to the OUs
"Europe" or "US".