For incoming traffic, rule applies to traffic being received on the non-secure interface(s).

For outgoing traffic, rule applies to traffic being sent out on the non-secure interface(s).