Rules using the match keyword do not impact traffic that is allowed, blocked or rejected. Instead, they are used to perform other actions. Think of an ACL for example, they do not always have to be used in filtering traffic in an access-group or access-class. They can also be used in prefix-lists , route-maps , or others.

match in on genet0 tag DMZ
pass out on genet1 tagged DMZ

Or to shrink.

match in on genet1 to 192.168.1.0/24 port ssh queue ssh

Normalize.

match in all scrub (no-df max-mss 1440)