Policies allow administrators to control firewall operations by enforcing rules and automatically taking action. Security policies to block or allow a network session based on the application, the source and destination zones and addresses, source users, and, optionally, the service (port and protocol).