When you create a security zone you assign a recipe to it. A recipe is a collection of security zone policies.