This value records, as a number of seconds elapsed since the Unix epoch (1970/1/1 00:00:00), the last time this zone-pair policy rule actually matched a packet. An administrator converts this timestamp to check how recently a specific inter-zone policy rule was last exercised, which helps distinguish actively used rules from stale ones that could potentially be cleaned up. For example, a rule whose last-match timestamp is many months old, while other rules in the same policy show recent timestamps, would be a candidate for review as possibly obsolete.