Tunnel zones
A tunnel zone is a network object that
-
represents certain types of plaintext, passthrough tunnels that you explicitly tag for special analysis,
-
is not an interface object, and
-
can be used as an interface constraint in some configurations.
For detailed information, see Using tunnel zones to apply access control at the tunnel level.