Scenario 1: firewall instances applied to inbound trafficIn this scenario, firewall instances are applied to inbound (in) traffic on an interface. Notice that firewall instances are evaluated before DNAT and routing decisions, and before SNAT.