Adjusting the Priority of a Protection Rule

Priority Description

You can check the priorities of protection rules in the rule list. A larger value indicates a lower priority. The value 1 indicates the highest priority.

Adjusting the Priority of a Protection Rule

1. Log in to the CFW console.
2. Click in the upper left corner of the management console and select a region or project.
3. (Optional) Switch to another firewall instance. Select a firewall from the drop-down list in the upper left corner of the page.
4. In the navigation pane, choose Access Control, and choose Internet Border Protection Rules or VPC Border Protection Rules.
5. In the Operation column of a rule, click Configure Priority.
6. In the displayed dialog box, select Pin on top or Lower than the selected rule, and click OK.
   • If you select Pin on top, the policy is set to the highest priority.
   • If you select Lower than the selected rule, you need to select a group or rule. The policy priority will be lower than the selected rule.

   When the priority of a rule is changed, the priority numbers of the rules that followed it in the original order are each decremented by 1.

Related Operations/Documents

• For details about how to add a protection rule, see: Configuring Protection Rules to Block or Allow Internet Border Traffic, Configuring Protection Rules to Block or Allow VPC Border Traffic, Configuring Protection Rules to Block or Allow NAT Gateway Border Traffic.
• For details about how to batch add blacklist or whitelist items, see: Configuring the Blacklist/Whitelist to Block or Allow Internet Border Traffic, Adding Blacklist or Whitelist Items to Block or Allow VPC Border Traffic, Adding Blacklist or Whitelist Items to Block or Allow NAT Gateway Border Traffic.
• Checking protection outcomes:
  • Policy hits: For details about the protection overview, see Viewing Protection Information Using the Policy Assistant. For details about logs, see Access Control Logs.
  • For details about the traffic trend and statistics, see Traffic Analysis. For details about traffic records, see Traffic Logs.
• For details about how to batch add protection policies, see Importing and Exporting Protection Policies.