rule any any with no security profile

[MP18]

need to confirm if i use rule with any any and no security profile does it do any layer 7 inspection?

is this same as app override?

[BPry · Accepted solution]

@MP18,

It still does layer-7 inspection and the application will still be identified. Essentially you would just be allowing any traffic and the firewall won't have any actions to take when it identifies a threat. 

[Brandon_Wertz]

IF you do this:

<SRC IP> any <DST IP> any <APP> any <DST PRT> any 

There will be no controls around L7 enforcement.  It will still identify application and ports, but shouldn't enforce any policy or control around what port an application uses.

[Raido_Rattameister · Accepted solution]

If you don't attach security profile then application is identified but traffic is not checked against threats.

Also no threat prevention logs will appear in firewall (including URL filtering) for traffic that matched this rule.

[MP18]

MAny thanks for great info

[MP18]

MAny thanks for great info.

Much appreciated answering the question