Which of the following packets is controlled by a firewall's security policy by default?

By default, a firewall’s security policy is mainly used to control unicast traffic between security zones. Unicast packets are the normal one-to-one communication packets exchanged between a single source host and a single destination host. Because most user service traffic, such as web access, file transfer, remote login, and application communication, is carried in unicast form, firewall security policies are primarily designed to inspect and control this type of traffic.

Broadcast packets are typically used for local network discovery or service announcements within the same broadcast domain, and they are not the standard focus of interzone security policy control. Multicast traffic is one-to-many communication and usually requires additional multicast-specific handling or routing mechanisms rather than ordinary default security policy treatment. Anycast is a special addressing and routing method rather than the usual packet-control category emphasized in firewall default policy behavior.

In Huawei firewall policy design, when administrators configure permit or deny rules between zones, those rules are generally intended to manage unicast service traffic . Therefore, among the options listed, the packet type controlled by a firewall’s security policy by default is Unicast .