The policies in this group allow only existing WAN connections to be used. There are two policies.
This policy prevents the checking of backlinks, external references, and login restrictions, the running of janitor or limber, and schema synchronization except on existing WAN connections. Compare Already Open, Spoofing.
This policy prevents all other traffic to existing WAN connections. Compare Already Open, Spoofing NA.
To prevent all traffic to existing connections, both policies must be applied.