zone matrix

Also written: zone plan

A table of which zone may start connections to which, on which ports; empty cells mean no. It serves as the firewall's specification and test list.