The SIP Firewall is a packet-based filtering engine. If a packet matches a rule, the SIP Firewall stops the rule traversal and either permits or drops the packet according to the rule action. The traversal process does not apply to rules defined with an action type of None.
The order of precedence for using the rules is:
Blacklist
Whitelist
Rules
Each list can contain more than one rule. The Session Manager traverses the rules from top to bottom within the lists.