When configuring SDN firewalls, after adding all assets, what is typically the first configuration you must address?

Creating update rules is a secondary configuration step that governs how existing rules are modified over time, and requires the initial connection definitions to already exist.

Configuring additional access is a refinement step that expands or restricts access beyond the baseline connections, which must be opened first.

Disconnecting previous firewalls is a cutover or migration task performed after the new SDN firewall is fully configured and validated, not the first step.

SDN firewall configuration follows a logical sequence where connections must be opened first to define which traffic paths are authorized between the added assets. Without establishing these base connections, the firewall has no permitted flows to refine, making subsequent configurations such as update rules, logging, and additional access controls meaningless or non-functional.

Configuring logging is a supporting configuration that should be set up after the primary connection and access rules are in place so that meaningful traffic data exists to log.