Hi Experts,
We are using two ordered layers: the usual Security (mainly network access) + Application (in which we mainly filter on applications).
![Damien_0-1654626419431.png Damien_0-1654626419431.png](https://community.checkpoint.com/t5/image/serverpage/image-id/16849i75B22BE1820EC865/image-size/medium?v=v2&px=400)
We are looking for a report that displays which Application rules a specific IP address has hit.
The thing is, in our report (see below), we are not able to distinguish Applications rules from Security rules.
By the way, the “Application Rule ID” doesn’t give any results.
![Damien_1-1654626419442.png Damien_1-1654626419442.png](https://community.checkpoint.com/t5/image/serverpage/image-id/16850iFB4904E385E05EC6/image-size/medium?v=v2&px=400)
In the following example of the result of our report, only the rule ID 39 is from the Application Policy, the other ones are from the Security policy.
![Damien_2-1654626419446.png Damien_2-1654626419446.png](https://community.checkpoint.com/t5/image/serverpage/image-id/16848i41595388D9608095/image-size/medium?v=v2&px=400)
Just to mention that we use R81.10.
Regards