Controls the scope of the policy rules. forward(1) - policy rules apply to packets forwarded by the Entity. local subnet will not apply to theIf forwardAndControl(2) - policy rules apply to control packets sent to the Entity as well as packets forwarded by the entity. Example: A router entity has interface 10.2.2.1 on IP subnet 10.2.2.0, and a 'deny traffic to 10.2.2.0' rule is enforced. In both forward(1) and forwardAndControl(2) modes, packets will not be routed to the subnet. In forwward(1) mode, packets sent directly to the router interface will reach it. In forwardAndControl(2) mode, packets sent directly to the router interface will be droped. This object is obsolete, since its functionality can now be defined using the apropriate interface / direction policy.