When configuring security zones in CTR 2.0 I understand that it processess the zones in a top down method. My question is that if, say for example, you have 5 security zones configured. An event comes through that matches security zone #2. Does processing on that event stop? or does the event pass all the way through all of the security zones, even after finding a match at #2. I am trying to find a way to filter events using a default downgrade and clear all, but I only want this to happen if it does not match any other criteria configured in the above security zones. Thanks in advance for your help!
