This object carries the functional area of the firewall, such as networking or security policy, in which the audited action occurred, as a variable binding in the firewall's SNMP notification. Administrators use it to quickly filter or group audit events by the part of the system they affected. For example, a batch of audit notifications all in a firewall-policy category would point an admin toward a series of rule changes rather than unrelated system settings.