[JPK300]

I have a question pertaining to a Client Auth rule.

Say I have a client auth rule similar to below

admins@any -> any via HTTP/HTTPS action client auth

Do any rules that have either HTTP or HTTPS in the service field have to be above the client auth rule? It appears thats the way my firewall functions but I cant find any documentation detailing this behavior. If a rule with HTTP or HTTPS in the service field is below this client auth rule it is never met. I would like to find a way around this, because this causes a number of rules to have to go above my stealth rule, which I would like to avoid if possible.