Hi, I am by no means an expert but, the way I try to do this:

Firewall communication rules at the top of the rule base - SSH allows, admin access etc.
Followed by your highest hit rules - more...