Which policy type must be applied on a WAN Edge application-aware firewall to control inter-VPN traffic?

A firewall policy is specifically designed to control traffic flow and enforce security rules between different VPNs (Virtual Private Networks) or zones on a WAN Edge device. This policy type allows for granular inspection and filtering of inter-VPN traffic based on various criteria like source/destination IP, ports, and applications. Data policies primarily manage traffic forwarding and QoS within the SD-WAN fabric, not inter-VPN security. Service-insertion policies are used to redirect traffic to external services like firewalls or IPS, rather than directly controlling inter-VPN traffic on the WAN Edge. Control policies influence routing and topology, not application-aware firewalling between VPNs.