This object specifies the destination IP subnet mask used in an IP filtering rule to identify which destination network addresses should be matched by the filter. The mask works with a destination IP address to define a range of IPs that the filter applies to; for example, a mask of 255.255.255.0 would match a /24 subnet. Administrators configure filters to control traffic forwarding, security policies, or traffic analysis based on destination subnets.