Why we need web-security policy while even we having same feature in normal prisma access policy?

[AkilanR]

Hi Team,

Kindly clarify me why we need web-security policy while even we having same feature in normal prisma access policy?

Scenario,

SaaS security discovered several apps, we can create a policy and later import to websecurity by policy recommendation.

But the question here is even the same application can be used in normal security policy in prisma access

Note:

Referred multiple paloalto document but only configuration is mentioned couldn't get,

1.why it is required? 

2.Whether it is mandatory requirement for SaaS security ?

[reaper]

you simply have the option of choosing the policy recommendation, or building your own policy

[laurence64]

I think that web-security once enabled is evaluated first (not 100 percent on that) but is also a role that can be give to web security admins so they can alter the web security policy but not other policies.