I added an Any packet filter from CMM to external and moved it to the top of the list like you said and that blocked the internet like I want.
So the question is, why did I have to move that policy to the top of the list? I thought the 'Policy Auto-Order Mode' would take care of it automatically.
I noticed that if I re-enable the policy auto-order mode, the policy I just created goes all the way back to the order, and the internet comes back (which I don't want)
When creating Any packet filter policies, they have to be moved manually?
Comments
I added an Any packet filter from CMM to external and moved it to the top of the list like you said and that blocked the internet like I want.
So the question is, why did I have to move that policy to the top of the list? I thought the 'Policy Auto-Order Mode' would take care of it automatically.
I noticed that if I re-enable the policy auto-order mode, the policy I just created goes all the way back to the order, and the internet comes back (which I don't want)
When creating Any packet filter policies, they have to be moved manually?
Any policies are put to the bottom of the list when using Auto-Order Mode.
Review this section in the docs:
Automatic Policy Order
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/policies/policy_precedence_about_c.html