To be able to control on the 172.16.50.0/24 network what traffic is allowed and not allowed back into the other networks.
For example I want to block ICMP. But I might want to allow access to a media server on 172.16.10.3 (ports 3400 only)....
Thats why I thought I needed a f/w policy for guest.