What are the valid sub-types for a Firewall type policy? (Select all that apply)

Device Identity allows policies to be applied based on the specific type or group of devices originating or receiving traffic, adding a layer of granular control.

Address is a fundamental sub-type, defining source and destination IP addresses or IP address groups that a policy applies to.

User Identity enables the firewall to apply policies based on authenticated users or user groups, linking network access to specific user profiles.

Schedule is a component used *within* a firewall policy to define its active times, rather than being a policy sub-type itself.

SSL VPN is a type of secure connection or interface, not a sub-type category for defining firewall policy matching criteria.