Allowed Proxy Hops setting

hi
I am trying to reach Edge Gateway from Azure hub via full ignition site gateway.
In which place do i need to set "Allowed Proxy Hops" - all 3 places ?
GAN network from Azure ignition to full site gateway already works.

What about zones - do i need to configure it everywhere or its ok to keep the default only if it allows the traffic?

after try and error it turned out that only full site gateway had to be configured to allow 1 hop setting to allow to reach the edge gateway