security policy application and service\ or service?

[${userLoginName}]

Hello,

If I have a policy for example that allows application "web-browsing" and service is "port 500" - does that mean that the rule will allow if the application is either "web browsing" OR "service 500" or the rule will be allowed if the application is "web browsing" AND "service 500"?

Thanks.

[SutareMayur · Accepted solution]

@${userLoginName},

Palo Alto will check for both. Traffic will be allowed from that rule only when it matches both 'web-browsing' and 'Port 500' as application and service port respectively.