You can enable any number of conditions in a rule. 


Conditions are AND-connected. This means: If you activate multiple conditions in a rule, the rule only matches if the traffic meets all active conditions.


See Rules Settings in the Threat Defender documentation for further information on rule setup.