For traffic that doesn’t match any user-defined rules, the default
rules apply. The default rules—displayed at the bottom of the security
rulebase—are predefined to allow all intrazone traffic (within the
zone) and deny all interzone traffic (between zones). Although these
rules are part of the pre-defined configuration and are read-only
by default, you can
Override
them and change
a limited number of settings, including the tags, action (allow
or deny), log settings, and security profiles.