Scenario 2: firewall instances applied to outbound traffic
In this scenario, firewall instances are applied to outbound (out ) traffic on an interface. Notice that firewall is evaluated after DNAT and routing decisions, and after SNAT.
- Scenario 3: Firewall Instances Applied to Locally Bound Traffic
In this scenario, firewall instances are applied to local [local] traffic on an interface. Notice that the firewall instance is evaluated before and after DNAT and the routing decision. In this scenario, SNAT is not performed.
- Scenario 4: Firewall Instances Applied to Locally Originated Traffic
In this scenario, firewall instances are applied to traffic flowing from the vRouter system itself. Notice that no firewall instances are evaluated in this case. In this scenario, DNAT is not performed.