Who is talking to what, and through which firewall

Connections by user group → endpoint → enforcement → application