When does a Firewall apply the default policy?