Preset outbound
DIRECT
Section titled “DIRECT”Direct, data exits directly.
REJECT
Section titled “REJECT”Reject, intercepts data from going out.
REJECT-DROP
Section titled “REJECT-DROP”Reject, unlike REJECT, this strategy silently drops the request.
Bypass. When a rule resolves to PASS, it is treated as a matched outbound and the current matched rule branch is skipped, then matching continues with subsequent rules.
If PASS is matched inside SUB-RULE, matching leaves that sub-rule and continues in the main rules; subsequent rules in the same sub-rules list are not evaluated.
PASS-RULE
Section titled “PASS-RULE”Bypass. Similar to PASS, but the difference is: when a PASS-RULE is hit in a SUB-RULE, it does not jump out of the sub-rules; it only skips the currently hit rule branch and continues matching rules in the sub-rules.
COMPATIBLE
Section titled “COMPATIBLE”Compatible, appears when no node is selected in the policy group filtering, equivalent to DIRECT.