Implementing Cisco Network Security (IINS v3.0) (#11)

When is the default

deny all

policy an exception in zone-based firewalls?

when traffic traverses two interfaces in different zones
when traffic sources from the router via the self zone
when traffic traverses two interfaces in the same zone
when traffic terminates on the router via the self zone