This INTEGER object (permit or deny) sets the access policy applied to the destination host or network identified by this firewall entry. An administrator uses it to decide, per destination-based rule, whether matching traffic is allowed through or blocked. For example, setting csOrionFwDestAccess to deny(2) for an entry pointing at a known-malicious destination range would block firewall traffic heading to that network.