VLAN group policy vs mx firewall rules

[Announcer]

I'm trying to find out which way is better?  Apply rules in the vlan group policy vs adding the rule in the mx firewall section.  Say I have vlan10 192.168.10.0, and vlan 20 192.168.20.0.  If I want to open up TCP port 445 to 20.0 where would be the best place to put it.  I'm curious because on the vlan group policy side the last rule is allow any-any.  Doesn't this cancel out any other rules I make?

[ww]

L3 firewall and GP firewall are allow any by default. You have to create a deny any any  yourself if that is your fw strategy. 

The difference is that L3 firewall rules are statefull.  The GP firewall is stateless(like a ACL)

[Inderdeep]

The perfect example here below @Announcer 
https://community.meraki.com/t5/Security-SD-WAN/MX-Group-Policy-vs-L3-Firewall-Rule/m-p/100520 

[Brash]

As well as what's been said above, MX firewall rules can use policy objects and Vlans as source or destination.