Application control VS. HTTPS Inspection

[Ari_who]

Hey friends,

I'm trying to block usage of AnyDesk.

1. I added an https inspection rule in the Outbound Policy.

2. I added a rule in Application Control blocking AnyDesk.

Then I tested it and it indeed blocks AnyDesk traffic.

Because HTTPS Inspection broke some other, permitted activity, I disabled the HTTPS Inspection rule.

Somehow, AnyDesk is still blocked. 

My question is, doesn't Application control require https inspection? How does it still work when the HTTPS Inspection rule has been disabled? 

I've attached a screenshot of both rules.

The MGMT server is at R82 JHF 91

Thank you!

Ari

[Chris_Atkinson]

Whilst AppC is less effective without HTTPS it can still work where we can leverage SNI.

For best results SSL inspection is desirable (and becoming more necessary).

[Timothy_Hall · Accepted solution]

You almost certainly have "Categorize HTTPS websites" set.  Here is a page from my upcoming Max Power 2026 book discussing it:

[Chris_Atkinson]

Amazing news about the new book!

[Ari_who]

You're absolutely correct, the URLF box is indeed checked!

Thanks for this thorough and excellent explanation!