security policy order not working.

[inderjit21]

I have a policy from trust to untrust any any allowed. I have cloned this policy and put on top of this with  address -test and deny 2 applications. This address is an ip for eg. 192.168.1.26 which is reserved in dhcp. But I can see apps being access via any any policy. Should the address be blocked using block policy.

[TranceforLife]

Hi,

Most likely not all conditions were met in the 1st policy, so traffic passed through the any any.

Did you check detailed logs from any any to see why it didn't match 1st policy ( sorce ip, destination , postrs, )?

Thx,

Myky

[BPry]

Is this a web applicaion and do you use SSL decyrption? If you are not using SSL decyption and are attempting to block two app-ids it's pretty common for this to not actually work.