The green interface is firewalled too, but for some reasons (for example VPN) you need the red interface
The roles of “colours” are described here
http://docs.nethserver.org/projects/nethserver-devel/en/v7/nethserver-firewall-base.html#roles-and-zones
for a description.