Without knowing what you have configured for the trust, one cannot tell. If you had loaded the the default config and then created the policy to allow traffic from untrust to trust, then you may as well, then you would have basically opened the network and scanning for malicious content with screens. Thats because the factory-default allows all traffic from trust to untrust. If you have simply blown away the default and created zones, then no traffic is going anywhere. Neither intra or inter-zone. If you create policies only for untrust to trust then return traffic from trust to untrust will be permitted, you don't need to create polices to allwo the return traffic because it is a stateful firewall. However you would not be able to inititiate traffic from trust to untrust without specific policies to permit said trraffic.