This read-write object specifies the filtering action, such as block, blockAndTrap, permitAndTrap, permit, blockAndDisablePort, blockTrapAndDisablePort, or blockAndLogInput, that this policy rule applies to matching traffic, with values 1-10 reserved for system use and higher values available for future user-defined applications. An admin sets this to define exactly what happens to traffic that matches the rule's classifier, ranging from simple permit/block to disabling the port entirely. For example, an admin wanting to automatically shut down a port when it detects traffic matching a security-violation rule would set this action to blockAndDisablePort rather than a plain block.