As a work around for a design limitation in the way Microsoft ISA Server 2004 processes rules referring to authenticated users, Chaperon versions build 192 and later now sort all of the ISA Server rules by assigning a sort category value to each rule based on the rule type.  Below is a table containing the sort category values and rule types.

010 client lockout by ip
020 agility filter
030 udf-a "all users"
040 udf-d "all users"
050 chaperon "all users"
060 non-chaperon "all users" deny
070 non-chaperon "all users" allow
090 client lockout by username
100 udf-a specific users
110 udf-d specific users
120 chaperon specific users
130 non-chaperon specific users deny
140 non-chaperon specific users allow

When sorting, Chaperon first categorizes each rule assigning a sort category (Three numbers preceding the labels above).  Next, the rules are sorted by sort category and within that, sorted alphabetically by name.  Once a new order is defined by the sort, Chaperon rearranges the rules in ISA and saves the changes.

You can override the Chaperon assigned sort category for non-Chaperon rules by placing [SortCategory=###] in the description of the rule within ISA.  The ### represents a numeric value and must be three characters in length.  For example, to place an item between agility filter and udf-a "all users", you could use [SortCategory=025].  This allows you to position non-chaperon rules anywhere in the sequence.

The newly defined order will be used the next time chaperon sorts the rules.  Chaperon rebuilds and resorts the rules each time a change is made to a Chaperon policy.  So to have Chaperon sort the rules immediately, simply make a minor change to a policy within Chaperon, revert the change back and then save the changes.  Now initiate a filter update (not a policy reload) and Chaperon will begin rebuilding the rules and will sort them upon completion.

Additional Example:  To make a rule or set of rules stay on top, [SortCategory=001] can be placed into the description of each of the rules.  This will place each rule into category 001.  Within this category the rules will be sorted alphabetically.  If the rules need to be in a particular order within the category, the names of the rules can be changed to be preceded by a number to represent which order the will fall into.  This will cause the rules to float to the top and arrange in order by name.