Hi,
For generic ZBF configuration examples, please take a look at:
http://www.cisco.com/en/US/partner/docs/ios/sec_data_plane/configuration/guide/sec_zone_polcy_firew_ps10592_TSD_Products_Configuration_Guide_Chapter.html#wp1124453
Specifically, if you have traffic you want to permit as in your example here, you'd have something like this:
class-map type inspect match-any permit-64-net
match access-group permit-64-acl
!
policy-map type inspect fw
class type inspect permit-64-net
pass
class class-default
drop log
where permit-64-net refers to the ACL you have, and apply this policy to the appropriate zone pair. Obviously you'd also have other inspect classes where you'd configure the "inspect" action as you normally would.
Hope this helps.
Thanks,
Wen
