Addto choose destination zones (default is any). Zones must be of the same type (Layer 2, Layer 3, or virtual wire). To define new zones, refer to Network > Zones.
Multiple zones can be used to simplify management. For example, if you have three different internal zones (Marketing, Sales, and Public Relations) that are all directed to the untrusted destination zone, you can create one rule that covers all cases.
Addto add destination addresses, address groups, or regions (default is any). Select from the drop-down, or click
Address Group, or
Regionsat the bottom of the drop-down, and specify the settings. Select
Negateto choose any address except the configured ones.