I know this is an old post but the solution by PhoneBoy seems like exactly what I need, unfortunately it's not working 😞
I need to allow certain users RDP access to a computer on Azure cloud using DNS name.
I've hit the same issue with the custom application only matching by Web Browsing, so I've tried the workaround using inline layers.
However, in rule 1.1 (if reffering to the screenshot by PhoneBoy) the SpecialURL object still matches by Web Browsing, thus the FW ignores this rule and drops the traffic on rule 1.3.
Am I missing something?