The client will be denied by policy p2.

The client will be denied by policy p1.

The client will be permitted by policy p2.

The client will be permitted by policy p1.

NAT overload

block allocation

port translation

NAT hairprinting

The log action implies an accept action.

The log action requires an additional terminating action.

The count action implies an accept action.

The count action requires an additional terminating action.

Global security policies are evaluated before regular security policies.

Global security policies can be configured to match addresses across multiple zones.

Global security policies can match traffic regardless of security zones.

Global security policies do not support IPv6 traffic.

Functional zones are a collection of regulated transit network segments.

Functional zones provide a means of distinguishing groups of hosts and their resources from one another.

Functional zones are used for management.

Functional zones are the building blocks for security policies.