which two types of deployments can b implemented

Which two types of deployments can be implemented for a zone-based policy firewall?