C.T.Sim, Regarding your FW problem, it's a policy problem. You can talk to Eddie for help.
Regarding question 1), no. If the rule explicitly states that A can ping to B, then B cannot ping to A since it has not been explicitly stated. Regarding question 2), implied rules are also known as rule 0. In the rulebase, rule 0 is hidden from view by default. First means that the implied rule is to be placed before any user-defined-rules. Before-last means that the implied rule must be placed right before the last user-defined-rule. Last mean... obvious... [:)] You must understand what is meant by the implied rules before you can understand all those... Regards, Stuart
