Application control VS. HTTPS Inspection

[Ari_who]

Hey friends,

I'm trying to block usage of AnyDesk.

1. I added an https inspection rule in the Outbound Policy.

2. I added a rule in Application Control blocking AnyDesk.

Then I tested it and it indeed blocks AnyDesk traffic.

Because HTTPS Inspection broke some other, permitted activity, I disabled the HTTPS Inspection rule.

Somehow, AnyDesk is still blocked. 

My question is, doesn't Application control require https inspection? How does it still work when the HTTPS Inspection rule has been disabled? 

I've attached a screenshot of both rules.

The MGMT server is at R82 JHF 91

Thank you!

Ari

[Chris_Atkinson]

Whilst AppC is less effective without HTTPS it can still work where we can leverage SNI.

For best results SSL inspection is desirable (and becoming more necessary).