Does the Post-NAT Zone for security policy is for Source zone and Destination Zone?
I read the following from the palo alto study guide:
A Security policy rule requires a source IP, destination IP, source zone, and destination zone. If you use an IP address in a Security policy rule, you must add the IP address value that existed
...