You can assign policies to individual users and to user groups. If you assign a policy to an individual user, it takes precedence over policies assigned to groups that the user belongs to. If no policy is assigned directly to a user and the user belongs to two or more groups that are assigned different policies, the highest ranked of the assigned polices is applied to the user.
Before you rank policies you should decide on a strategy based on your objectives and which groups you assign policies to. For example, you may want network access control policies that apply to specific departmental groups to be ranked highest and more restrictive polices to be ranked below them, or you may want your most restrictive policy to be ranked highest.
- On the menu bar, clickGateway > Policies.
- Select the policy type that you want to rank.
- To change the order of a policy in the list, drag for the policy.