Universal ZTNA creates an IP Firewall Policy for a hybrid or network policy created in Universal ZTNA when network service groups are configured for that policy.
The IP Firewall Rules uses other common objects such as IP address and network services which are also created by Universal ZTNA when network service groups are configured for a policy.
The IP Firewall Policy is automatically associated to the outbound traffic policy for the corresponding user profile in ExtremeCloud IQ.