The Self Zone The ZPF rules for a zone-based policy firewall are different when the router is the source or the destination of the traffic.
{"Image DocumentName": "The Self ZoneThe ZPF rules for a zone-based policy firewall are different when the router is the source or the destination of the traffic.", "Image ImageDescription": "When an interface is configured to be a zone member, the hosts that are connected to the interface are included in the zone. However, traffic to the router is not subject to the zone policies. By default, all router IP interfaces are part of the self zone. A zone-pair that includes the self zone and associated policy, applies to router generated or traffic destined to the router. It does not apply to traffic traversing the router. A policy can be defined using the self zone as either the source or the destination zone. The self zone is a system-defined zone. It does not require any interfaces to be configured as members.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}