Group Policy Behavior By default for MX L3 and L7 firewalls are processed independently, as illustrated above. Note that L3 and L7 rules in a group policy behave as one logical firewall just like an MR, again as illustrated above. With L3 being processed before L7, meaning that any denied L7 applications (e.g. Netflix) would be allowed if the L3 portion of the rule contained an explicit allow for HTTP/HTTPS.
... View more
