| When configured with the "PASS" action, stateful inspection is applied to all traffic passing between the configured zones. | |
| Interface ACLs are applied before zone-based policy firewalls when they are applied outbound. | |
| The firewalls can be configured simultaneously on the same interface as classic CBAC using the ip inspect CLI command. | |
| Policies are applied to traffic moving between zones, not between interfaces. |