Binds real network traffic to the policy vocabulary. The gateway classifies
each new flow by protocol, destination address and port into a destination
identity, traffic class and operation, then calls decide().
First matching binding wins; no match means the flow is denied.
Binds real network traffic to the policy vocabulary. The gateway classifies each new flow by protocol, destination address and port into a destination identity, traffic class and operation, then calls decide(). First matching binding wins; no match means the flow is denied.