A suffix is the zone of the DNS namespace to which this rule applies. It is part of the FQDN. For example, in the FQDN someserver.hr.contoso.com, ...