I don't think there's any such thing as precedence. If you have both
enabled then they must both permit the traffic for it to be allowed. If
the WF permits but AC blocks then the session is blocked.
You are leaving our website
You are leaving our site and we cannot be held responsible for the content of external websites