...
Access TCP Services of External Hosts
To access the applications external to the EVE device (not part of the user applications), for instance to a 'local profile' server which share the LAN with the EVE device. It is similar to the above 'Access TCP Services of Application'. The only difference is the policies are controlled separately for applications and external endpoints. Obviously the user can not use 'edgeview.sh app' to find out external hosts and applications, those remote endpoints have to be learned through some other mechanism.
Access TCP services of EVE device (Dom0 side)
...