In order for this policy to be effective, what order should the policy statementsbein? The number refers to the Policy ID shown in the diagram.
TheNetScreendevice checks all attempts to traverse the firewall against policies, beginning with the first one listed in the policy set for the appropriate list and moving through the list. Because theNetScreendevice applies the action specified in the policy to the first matching policy in the list, you must arrange them from the most specific to the most general. Policy ID 3 is the most specific policy because theSrc-address andDst-address have asubnetmaskof 32.So only 1 ip address for the source and 1 ip address for the destination.