Match conditions use the following characteristics to specify
the type of network traffic to be monitored:
From-zone and to-zone—All traffic flows
from a source to a destination zone. You can select any zone for the
source or destination. You can also use zone exceptions to specify
unique to and from zones for each device. Specify any to
monitor network traffic originating from and to any zone. The default
value is any.
Source IP Address—Specify the source IP
address from which the network traffic originates. You can specify any to monitor network traffic originating from any IP address.
You can also specify source-except to specify all sources
except the specified addresses. The default value is any.
Destination IP address—Specify the destination
IP address to which the network traffic is sent. You can set this
to any to monitor network traffic sent to any IP address.
You can also specify destination-except to specify all destinations
except the specified addresses. The default value is any.
Application—Specify the Application Layer
protocols supported by the destination IP address. You can specify any for all applications and default for the application
configured in the attack object for the rule.
