Create a rule to block unauthenticated users

[marlon_advento]

I configured a policy  for specific user groups - specific whitelist/black list . I need to add a rule to block Unauthenticated user and where should i position it.  kindly see screenshotshot. 

[AaronT]

If it were me, I would make the last rule in the "Authenticate" ruleset.  If the authentication is not successful, then block.  If the authentication is successful, then do a stop ruleset

[marlon_advento]

can you show me the detailed rule thanks in advance. still blocking

[AaronT]

Authorized users are in the "Authorized Web Users" list.  Authorized Groups are in the "Authorized Web Groups" field.  If a user is not in either list, it blocks.