Watchguard V10 User Manual page 209

6
From the Service drop-down list (if active), select the
service this policy should check for.
7
From the Protocol drop-down list (if active), select the
protocol to be used.
8 In the Server Port field (if active), type the port number
for this protocol.
9 If this test will verify a policy for multi-tenant domain
traffic, type an ID in the Tenant ID field.
10 Click Done.
The Policy Checker starts at the top of the policy list and
checks your test parameters against every rule. If it finds a
match, the first policy affected by such traffic is highlighted
in the Policy Manager list. This is particularly helpful when
you have a long list of policies and you want to:
• Change the order of policies.
• Edit each policy to change any overlapping settings
If no match is found, either your newly created policy con-
tained errors, or the test scenario you hoped to validate
had errors in the settings. To examine the rule and its set-
tings:
1
Resort the policies in the window and use the Security
Policy Checker again to test the sort order (after
verifying your test traffic entries).
2
If no matching policy is found, select the policy that
should have been applied to the test traffic, and
double-click Edit.
The Edit Security Policy dialog box appears.
3
Because this dialog box has the same features as the
Insert Security Policy dialog box, you can check all the
configuration options, drop-down lists, text fields, and
checkboxes to find the incorrect entry.
4
After you are finished, reopen the Security Policy
Checker dialog box, re-enter the test scenario settings,
and try again.
Firebox Vclass User Guide
Using Policy Manager
177