rule move (SSL-encrypted traffic detection policy view)

Function

The rule move command moves a policy rule to change the priority of the policy rule.

Format

rule move rule-name1 { { { after | before } rule-name2 } | bottom | down | top | up }

Parameters

Parameter	Description	Value
rule-name1	Indicates the name of a moved rule.	The name of the SSL-encrypted traffic detection policy rule must exist.
rule-name2	Indicates the name of the target rule.	The name of the SSL-encrypted traffic detection policy rule must exist.
after	Moves rule-name1 after rule-name2.	-
before	Moves rule-name1 before rule-name2.	-
bottom	Moves the rule to the bottom.	-
down	Moves the rule after the lower one.	-
top	Moves the rule to the top.	-
up	Moves the rule before the upper one.	-

Views

SSL-encrypted traffic detection policy view

Default Level

2: Configuration level

Usage Guidelines

By default, SSL-encrypted traffic detection policy rules configured earlier have higher priorities and are preferentially matched.

Traffic preferentially matches an SSL-encrypted traffic detection policy rule with high priority. If traffic successfully matches a detection policy rule, the traffic does not match other policy rules. Therefore, you must place the policies from the most specific to the least specific.

The rule move command moves an SSL-encrypted traffic detection policy rule to adjust its policy.

Example

# Move SSL-encrypted traffic detection policy rule test1 before SSL-encrypted traffic detection policy rule test2, so that the priority of test1 is higher than that of test2.

<sysname> system-view
[sysname] decryption-policy 
[sysname-policy-decryption] rule move test1 before test2