# Whitelisting traffic

Whitelisting means defining a list of IP addresses that must never be blacklisted.

Whitelisting is implemented by following general Access rule design principles. Blacklisting applies only at the position of the blacklisting Access rules in the policy. Connections that have already been allowed or discarded before the blacklisting rules are not affected by blacklisting. If an Access rule allows a connection, an Access rule that refers to the blacklist further down in the policy cannot blacklist the connection.