I am trying to create a Policy which says " Keep the Meta Data and Drop the Packet". I am thinking to create a Policy at Network Rules on Decoder which contains the above logic. Could anyone Please help me to understand whether it will work properly or not? It would be great if the flow of data processing can be explained for me. At what layer Parsing is done? does Meta is created after Parsing?