Application & URL Filtering Blade Rule Ordering

[LostBoY]

I am trying to incorporate Application & URL Filtering blade in my R80.40 Gateways.. currently all filtering happens in Proxy.

My query is if i create a deny deny any rule at the bottom of the Application Policy .. do i need to create all "Accept" rules at the top which should be in line with my Proxy whitelisting ?

As i understand the order is it will first go for port filtering in ACL then it comes to Application Policy for content filtering ..so even though content filtering is allowed in proxy it wont work until i create respective allow rules in Application Policy. 

[G_W_Albrecht · Accepted solution]

You should not create a CleanUp rule here but a pass all rule, any any allow ! See sk73220: ATRG: Application Control and refer to the "Rule Matching in the Access Control Policy" section in the Next Generation Security Gateway R80.10 Guide or higher.