Glossary: Network Security

first match wins

Also written: rule order, top-down

Firewall rules are checked from the top, and the first rule that matches decides. Rules below it are never read for that packet, so specific rules must come before broad ones.