This IpAddress object specifies the destination address a packet must carry to match this General Access List entry, mirroring the source-address match on the other side of the connection. An administrator uses it to scope a rule to traffic heading toward a particular server or network, such as an internal file server that should only be reachable from certain sources. For example, setting this to 10.1.1.100 would make the entry apply only to packets destined for that single host.