An employee connects to the appliance from a PC outside of the corporate office:
The user connects to the appliance, logs in to the realm Employees, and is assigned to the Full-time employees community.
After the user authenticates, the client device is interrogated to determine if it matches any device profiles belonging to the zones referenced by the Full-time employees community, starting with any Deny zones.
In this case the appliance determines that the PC is running Google Desktop, which makes it a match for the Google Desktop present device profile. The device is classified into the Deny zone named Block-access.
No other zones are evaluated and the user’s access request is denied.
The user is logged out.