When you configure a network service group for a Universal ZTNA policy, Universal ZTNA creates an IP firewall policy.
The IP Firewall Rules uses other common objects such as IP address and network services which are also created by Universal ZTNA when network service groups are configured for a policy.
The IP Firewall Policy is automatically associated to the outbound traffic policy for the corresponding user profile in ExtremeCloud IQ.