I haven't found this stated explicitly in the documents - if a rule has it's source as 2 zones (call them ZoneA and ZoneB) and 2 port (port3 and port4) is the logic:
(ZoneA or ZoneB) and (port3 or port4)
So the rule would allow traffic from:
ZoneA, port3
ZoneB, port3
ZoneB, port4
..but not..
ZoneA, port1
or
ZoneC, port3
Is that correct? Thanks for the clarification.
This thread was automatically locked due to age.