Firewall Rule Order - To optimize or not to optimize

I'm an administrator for a shipboard TMG 2010 server which acts as a proxy for client workstations to interact with a shipboard router (to acess external addresses). Our afloat LAN requires satellite communication so slow connections are normal and the current rule set is a bit of a mess in the organization department. Here is a synopsis of the setup:

  • 58 Total rules
  • ~1200 assets on our network
  • Most traffic leaves the firewall on rules 33-36
  • Server/Application specific rules are at the top of the list
  • Low priority users towards the bottom half

The question is it worth reshuffling the high traffic rules higher up over our server specific rules or is it best left as is?

In other words will reordering the rules have a noticeable effect?

Thanks in advance for any assistance.

June 12th, 2015 4:01am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics