How was determine or verify after with application override bypass L7

[Pattarachai]

Hi Expert ,

I would like to verify after config and traffic is match with Application Override Policy that it already bypass L7  how to check it via cli or gui so, I have understood about can check with show session id after filter application is already override but I have to clarify and verify it. 

Sorry to bad english 

[BPry]

@Pattarachai,

The only time that layer7 inspection is used after an override policy is hit is if you've setup the policy to override to a pre-defined application. The firewall won't do any application identification as it matched your override policy, but it will continue to do content threat inspection. 

tl:dr

If you override to a custom application then inspection stops at layer4, full stop. 

If you override to a pre-defined application then traffic will still receive content threat inspection. 

Building an override policy with a pre-defined application is not recommended.