Using unique identifiers for applications in a security rule by studying the existing traffic flow

[ibhatti]

My suggestion is to using unique identifiers for applications in a security rule by studying the existing traffic flow and to not use service-IDs in a security rule. If the existing rules can show and/or suggest what applications are using that rule, then the firewall administrator can replace the service-IDs with a particular application to make the traffic more restrictive and secure.

[PhoneBoy]

You posted this in a submission space for a content.
Meanwhile, this sounds like a Request for Enhancement.

[emmap]

If the rule is in a layer that is enabled for access control/URLF, you can do this already by setting the logging to Detailed or Extended logging.