Check Point HARMONY R81 Administration Manual page 146

Example
This is how the Endpoint Security client applies the rules after you change order of the rules in
the previous example policy.
If there is more than one rule for an Endpoint Security component, the Endpoint Security client
applies the rules in this order:
n First rule that applies to the user or computer in the "more rule(s)"section.
If no rule matches the user or computer, the default rule applies.
n
Best Practice - Put rules for specified users or computers, in the "more rule(s)"section, above
rules for groups and containers they are members of.
Example 1
Read the comments in the rules.
No Name
-
Firewall
Default Firewall
settings for the
entire
organization
- 2 more rules
1 Firewall rule for
Europe and US
2 Firewall rule for
managers
Applies to
Entire Organization
Europe
\Directories\example.test.com\Example
US
\Directories\example.test.com\Example
Managers
\Directories\example.test.com\Example
R81 Harmony Endpoint Server Administration Guide | 146
Working With Rules
Comment
This rule applies to
users who do not
belong to the OUs
"Europe" or "US",
and do not belong
to the AD group
"Managers".
This rule applies to
users who belong
to the OUs
"Europe" and "US".
This rule applies to
users in the AD
group "Managers"
who do not belong
to the OUs
"Europe" or "US".