Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?