Courts require emergency deny rules that always evaluate first duri…

Question

Courts require emergency deny rules that always evaluate first during an incident. Where should the administrator put those rules?

Accepted Answer

In the Emergency category of NSX-T firewall policy so they evaluate before Infrastructure, Environment, and Application. — NSX categories are a line at the courthouse—Emergency goes near the front, not the back of Application. Bottom-of-list is not highest priority. Carbon Black and Access policies are different products and do not reorder Distributed Firewall.

Answer

At the bottom of the Application category, because the last rule wins.

Answer

In a new Carbon Black Cloud prevention policy labeled Emergency.

Answer

On a Workspace ONE Access policy with a deny action for VM-to-VM traffic.

Courts require emergency deny rules that always evaluate first during an incident. Where should the administrator put those rules?

Short Explanation

Full Explanation