The content of the zones item in appsec rules isn't described enough: * What are name, zones * What are the mandatory items for a zone * What are the optional items for a zone [This is a reminder issue]