Ingress and Egress Ports
A network port is an ingress port that accepts network traffic. A tool port is an egress port that forwards network traffic to analysis tools. The connections must be made between (ingress) network ports and (egress) tool ports before rules can take effect.