. . . "In this way, services such as packet filtering, NAT and auditing can operate without being exposed to services or users operating inside of the non-global zone." . . .