"Outside Web Server" {
        from Trust;
        source 10.1.1.0/24;
        source-region none;
        to Untrust;
        destination 200.10.10.10;
        destination-region none;
        user any;
        category any;
        application/service [ any/tcp/any/8000 any/tcp/any/80 any/tcp/any/8080 ];
        action allow;
        icmp-unreachable: no
        terminal yes;
}

"ICMP Any" {
        from Trust;
        source any;
        source-region none;
        to Untrust;
        destination any;
        destination-region none;
        user any;
        category any;
        application/service [ icmp/icmp/any/any ping/icmp/any/any ];
        action allow;
        icmp-unreachable: no
        terminal yes;
}

"DNS Outbound" {
        from Trust;
        source 10.1.1.0/24;
        source-region none;
        to Untrust;
        destination [ 8.8.8.8 8.8.4.4 ];
        destination-region none;
        user any;
        category any;
        application/service  dns/udp/any/53;
        action allow;
        icmp-unreachable: no
        terminal yes;
}

"Inbound to DMZ Web" {
        from Untrust;
        source any;
        source-region none;
        to DMZ;
        destination 200.10.10.100;
        destination-region none;
        user any;
        category any;
        application/service [ any/tcp/any/8000 any/tcp/any/80 any/tcp/any/8080 ];
        action allow;
        icmp-unreachable: no
        terminal yes;
}

"Inbound to DMZ Deny" {
        from Untrust;
        source any;
        source-region none;
        to DMZ;
        destination any;
        destination-region none;
        user any;
        category any;
        application/service  any/any/any/any;
        action deny;
        icmp-unreachable: no
        terminal no;
}

intrazone-default {
        from any;
        source any;
        source-region none;
        to any;
        destination any;
        destination-region none;
        category any;
        application/service  any/any/any/any;
        action allow;
        icmp-unreachable: no
        terminal yes;
        type intrazone;
}

interzone-default {
        from any;
        source any;
        source-region none;
        to any;
        destination any;
        destination-region none;
        category any;
        application/service  any/any/any/any;
        action deny;
        icmp-unreachable: no
        terminal yes;
        type interzone;
}

dynamic url: no
pol objs matched

