---
schema_version: "1"
id: 30b44768c3d6ff656e36ad0bcada08d57ab1bffce72bfe93ef37e33e2934d2e9
title: Reordering Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/mule-gateway/policies-reorder.md
canonical_url: https://docs.mulesoft.com/mule-gateway/policies-reorder
source_site: docs.mulesoft.com
content_type: documentation
content_hash: ae9441a787d70175684f4e4b60af5699a7e9a3ca20ff90a4c8adb4d020a66138
description: MuleSoft Documentation Site
latest: true
---
---
product: Mule Gateway
---

# Reordering Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

In Mule Gateway, to execute certain policies before others, you can configure the order of execution
of included and custom API level policies. However, you cannot configure API level policies to
execute before automated policies.

You reorder policies via API Manager.

> [!IMPORTANT] You cannot configure the execution order of the
> [Cross-Origin Resource Sharing (CORS) policy](https://docs.mulesoft.com/mule-gateway/policies-included-cors). In Mule Gateway, the CORS
> policy executes before automated and API level policies.

## Reorder Policies

To reorder policies in Mule Gateway:

1.  Go to **Anypoint Platform > API Manager**.

2.  In **API Administration** click the name of the API whose policies you want to reorder.

3.  From the left navigation menu, click **Policies**.

4.  From the top of the list of the applied policies, click **Reorder policies**.

5.  From the **Reorder Applied Policies** section, use the up and down arrows to rearrange the order
    of policies.

6.  Click **Apply order**.

## Apply Duplicate Policies

Mule Gateway supports applying duplicate policies. Automated, API-level, and resource-level policies
all support duplicate policy application.

When applying duplicate policies:

- Add a label to the duplicated policies to differentiate them.

- Consider if it makes sense to apply duplicated policies. For example, the duplicated IP allowlist
  policies allow only IPs that are allowed by both policies. Rather than applying duplicated
  policies, configure the IPs in one policy.

## See Also

- [Included Policies Directory](https://docs.mulesoft.com/mule-gateway/policies-included-directory)
