Most firewalls will have an explicit deny at the end of every rule. It is a default setting for firewalls.
I'm not sure for SonicWall, but for Cisco, there'll be a "deny any any" at the end of the rules line and it is not shown on the config page.