In a firewall rule, what are the first three tabs used to identify?

• A. Action selection
• B. Identifying the traffic
• C. Logging options
• D. Advanced options

Answer: (B)

Identifying which packets the rule should apply to is done in the early tabs of the firewall rule interface. The first tab holds the essential match fields: the direction of traffic (the chain), source and destination IP addresses, protocol, and source/destination ports, along with the input or output interface. These fields describe the traffic itself and determine which packets are eligible for the rule to act on.

The next tab adds more criteria to refine that identification (for example, connection state like new or established, or additional qualifiers). The third tab provides yet more options that can further qualify the traffic. Together, these tabs define exactly which traffic is being identified and matched by the rule, before any action is taken.