This value records, in seconds since the Unix epoch, when a specific zone-pair policy rule was last matched by a packet. An administrator uses this to identify inter-zone policy rules that haven't been exercised recently and could be candidates for cleanup or review. For example, a rule whose last-match time is many months old compared with recently active neighboring rules would stand out as potentially unused.