https://community.cisco.com/t5/network-platform-api/help-api-for-firewall-rules/m-p/5436364#M5798 <P>The default rule is the rule of last resort, you don't modify it, you <EM>override</EM> it with your own rule(s).</P><P>Rules are applied in order until one matches, the default rule is the very last to be tried (assuming no other rule matched).</P><P>If you create an SSID firewall rule deny-any-any-any, it will effectively replace the default allow-any-any-any (which will never be applied).</P> Thu, 11 May 2023 18:46:03 GMT sungod 2023-05-11T18:46:03Z https://community.cisco.com/t5/network-platform-api/help-api-for-firewall-rules/m-p/5436363#M5797 <P>Hi everyone, im trying to modify the default rule(MR product) but the api said this:</P><H1>Update Network Wireless Ssid Firewall L3 Firewall Rules</H1><P><SPAN>PUT /networks/</SPAN><STRONG>{networkId}/wireless/ssids/{number}</STRONG><SPAN>/firewall/l3FirewallRules</SPAN></P><P><SPAN>An ordered array of the firewall rules for this SSID (<STRONG>not including the local LAN access rule or the default rule</STRONG>)</SPAN></P> Thu, 11 May 2023 16:05:22 GMT https://community.cisco.com/t5/network-platform-api/help-api-for-firewall-rules/m-p/5436363#M5797 Leeones 2023-05-11T16:05:22Z https://community.cisco.com/t5/network-platform-api/help-api-for-firewall-rules/m-p/5436364#M5798 <P>The default rule is the rule of last resort, you don't modify it, you <EM>override</EM> it with your own rule(s).</P><P>Rules are applied in order until one matches, the default rule is the very last to be tried (assuming no other rule matched).</P><P>If you create an SSID firewall rule deny-any-any-any, it will effectively replace the default allow-any-any-any (which will never be applied).</P> Thu, 11 May 2023 18:46:03 GMT https://community.cisco.com/t5/network-platform-api/help-api-for-firewall-rules/m-p/5436364#M5798 sungod 2023-05-11T18:46:03Z