NatFirewallMatch (type)

{
  "additionalProperties": false, 
  "description": "The type indicates how the firewall is applied to a traffic packet. MATCH_EXTERNAL_ADRESS indicates the firewall will be applied to external address of a NAT rule. For SNAT, the external address is the translated source address after NAT is done. For DNAT, the external address is the original destination address before NAT is done. For REFLEXIVE, to egress traffic, the firewall will be applied to the translated source address after NAT is done; To ingress traffic, the firewall will be applied to the original destination address before NAT is done. MATCH_INTERNAL_ADDRESS indicates the firewall will be applied to internal address of a NAT rule. For SNAT, the internal address is the original source address before NAT is done. For DNAT, the internal address is the translated destination address after NAT is done. For REFLEXIVE, to egress traffic, the firewall will be applied to the original source address before NAT is done; To ingress traffic, the firewall will be applied to the translated destination address after NAT is done. BYPASS indicates the firewall stage will be skipped.", 
  "enum": [
    "MATCH_EXTERNAL_ADDRESS", 
    "MATCH_INTERNAL_ADDRESS", 
    "BYPASS"
  ], 
  "id": "NatFirewallMatch", 
  "module_id": "Nat", 
  "title": "The rule how the firewall is applied to a traffic packet", 
  "type": "string"
}