App Control Traffic match 2 policies

[FWNinja]

Hi all,

a specific app control traffic are matching two policies.

How can it be possible?

Thanks and Best Regards

Francesco

[PhoneBoy]

Because we are continually evaluating application flows and some signatures are more generic/specific than others.
For example you might allow the category “Web Browsing” (very generic) but might not want people visiting a file sharing or video site (more specific).
Or you might use Content Awareness to, say, prevent uploads of files to sites you otherwise allow access to.
Bottom line: our classification of a given flow can and does change.