When building the site to site VPN in FTD/FMC where does the tunnel endpoint exist (what zone)?
For example, in Palo Alto, a tunnel can be placed into it's own zone and the access control policy uses that zone to send traffic to or receive from a r...