Putting broader rules that grant more permissions at the top of the list may cause the appliance to find a match before it has a chance to process your more restrictive rules. As a general rule, it is best to put your most specific rules at the top of the list.