Policies : Policies > Decryption : Decryption Destination Tab

Decryption Destination Tab
Select the Destination tab to define the destination zone or destination address that defines the destination traffic to which the policy will be applied.
Click Add to choose destination zones (default is any). Zones must be of the same type (Layer 2, Layer 3, or virtual wire). To define new zones, refer to Network > Zones.
Click Add to add destination addresses, address groups, or regions (default is any). Select from the drop-down, or click Address, Address Group, or Regions at the bottom of the drop-down, and specify the settings. Select Negate to choose any address except the configured ones.
Policies > Decryption