https://live.paloaltonetworks.com/t5/general-topics/user-member-of-multiple-groups-software-v-8-1-2/m-p/244171#M69705 <P>If a user is a member of multiple groups for web filtering and the groups are used in different policies will the user be able to access the sites in the multiple policies?&nbsp; &nbsp;</P> Thu, 20 Dec 2018 21:23:46 GMT gwenturner 2018-12-20T21:23:46Z https://live.paloaltonetworks.com/t5/general-topics/user-member-of-multiple-groups-software-v-8-1-2/m-p/244171#M69705 <P>If a user is a member of multiple groups for web filtering and the groups are used in different policies will the user be able to access the sites in the multiple policies?&nbsp; &nbsp;</P> Thu, 20 Dec 2018 21:23:46 GMT https://live.paloaltonetworks.com/t5/general-topics/user-member-of-multiple-groups-software-v-8-1-2/m-p/244171#M69705 gwenturner 2018-12-20T21:23:46Z https://live.paloaltonetworks.com/t5/general-topics/user-member-of-multiple-groups-software-v-8-1-2/m-p/244179#M69706 <P>Security policies are evaluated top to down.</P><P>First one that matches will take precedence.</P><P>&nbsp;</P><P>So one rule can match at a time. But if&nbsp;same URL is in allowed and denied for same user then order is following:</P><P><A title="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC" href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC</A></P> Thu, 20 Dec 2018 21:57:47 GMT https://live.paloaltonetworks.com/t5/general-topics/user-member-of-multiple-groups-software-v-8-1-2/m-p/244179#M69706 Raido_Rattameister 2018-12-20T21:57:47Z