What does rule shadowing in Security policies do?
What does rule shadowing in Security policies do?
Rule shadowing in Security policies indicates that a broader rule matching the criteria is configured above a more specific rule. This means the broader rule will take precedence and the specific rule will never be hit, rendering it ineffective.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVXCA0 "A shadow rule warning generally indicates a more broad rule matching the criteria is configured above a more specific rule."
B A shadow-rule warning indicates that a broader rule matching the criteria is configured above a more specific rule.