If VPM policy is not working as expected and to avoid confusions that may arise due to the deployment type, it is highly advised to ensure that the layers in the Virtual Policy Manager are in the correct order by following the VPM policy layer order shown below.

VPM Policy Layer Ordering Best Practices

• Admin Authentication Layer
• Admin Access Layer
• Admin Login Banner Layer
• DNS Access Layer
• Socks Authentication Layer
• SSL Intercept Layer
• SSL Access Layer
• Web Authentication Layer
• Web Access Layer
• Web Content Layer
• Web Request Layer
• Web Forwarding Layer
• CPL Layer