For incoming traffic, rule applies to traffic being received on the secure interface(s).

For outgoing traffic, rule applies to traffic being sent out on the secure interface(s).