terms.pol.hcl

term allow-intra-office {
  comment:: "Spoofs are already blocked at the borders"
  source-address:: INTERNAL
  destination-address:: INTERNAL
  destination-port:: SSH
  protocol:: tcp
  action:: accept
}

term allow-remote {
  source-address:: REMOTE
  destination-port:: SSH
  protocol:: tcp
  action:: accept
}

term implicit-default-deny {
  comment:: "Deny everything else"
  action:: deny
}