Block internet access to CCTV but allow SMTP out and VPN access

Question

Hello, 
 I have upgraded from the UTM to the XG firewall. I am trying to create rules where I block all internet access to the CCTV equipment but allow access to it fro VPN and allow it access to send out SMTP. These are the rules I set up. I think they are in the correct order that they need to be. Right now SMTP does not work and I haven't had a change to try out the VPN access (ios 10.3.2 beta broke openvpn) so I have to wait to try it out after they fix it.

also what does the ID number stand for?

Aditya Patel · Accepted Answer

Hi J F , 
 The Rule ID is the representation of Rule Number for your reference , as for your concern you may need to position rule ID 3 and 2 above 4. As the rule would prioritize from top to bottom based on the position on the rules not the Rule ID.

J F · Answer

Just reporting back I finally figured it out. I needed to allow DNS in the SMTP rule. Once that was added, everything started working correctly.