Which rule type is appropriate for matching traffic occurring within a specified zone?

A Universal rule typically has a broader scope, applying generally across multiple zones or regardless of specific zones, rather than exclusively to traffic *within* one zone.

'Shadowed' describes a rule that is never matched due to a broader or identical rule above it, not a type of rule based on its zone scope.

Intrazone rules specifically apply to traffic where both the source and destination zones are identical, enabling granular security control over communication occurring within a single trusted network segment.

Interzone rules are designed to control traffic *between* different security zones, meaning the source and destination zones are distinct and not the same.