Ingress policies are used to perform actions on packets at ingress. Ingress groups classify the packets received on devices.