Build a firewall ruleset, then click Analyze to detect conflicts, shadowed rules, and overly permissive entries. Use ANY for wildcard source/destination. Rules are evaluated top-down (first match wins).