04-13-2017 12:41 PM
Okay, I found it. It's under Applications tab (I don't know how I missed it when looking for applications),
so for the security policies having "any" in the "Application" field and "allow" in "Action" field, will be allowing unknown-tcp/udp as well? and all other security policies for which you define corresponding applications (like ssh, web-browsing etc) to allow, will be blocking unknown-tcp/udp?
Also, had another question: so for all the DNS responses that PA would get for which it doesn't find corresponding DNS requests, won't it be classified under "dns" as application instead of "unknown-udp"?
