A named firewall profile that encapsulates a complete set of IPv4 and
IPv6 firewall policies for a given deployment context. Only a single
firewall profile instance is permitted per scope. Each profile is
identified by a unique name and contains separate IPv4 and IPv6
containers with tunables for session management, traffic classification,
spoofing protection, multicast optimization, and various datapath behaviors.
Profiles can be created, updated, and deleted independently, allowing
administrators to maintain multiple policy sets and apply them to different
device groups or network segments as needed.