A city permitting allow exists in Distributed Firewall, but a higher Emergency deny matches first and hit counts never increment on the allow. What should the administrator do?
Select an answer to reveal the explanation.
Short Explanation
First match wins, like a security line that stops at the first no. A duplicate allow under a deny never gets a turn. Read hit counts and fix the Emergency rule instead of stacking copies at the bottom.
Full Explanation
NSX Distributed Firewall evaluates sections and rules in order; the first match wins. An Emergency deny above an Application allow will consume the flow, so the lower allow never increments. Creating the same allow at the bottom, disabling DFW, or moving the problem to Carbon Black Cloud does not fix order.