types of deployments zone based policy firewall

Which two types of deployments can be implemented for a zone-based policy firewall?