I deployed a CP firewall running R80.10 and I am using App & URL Filtering however, I noticed an abnormal behavior.
For example, I have a policy for Symantec Updates so my policy looks like the following below,
Source: Internal Subnet
Service & Application: Symantec-Updates
When I check the logs for the particular rule, I noticed some traffic which supposed to be not there like going to other site not related to Symantec.
I would like to know why is like that, is that normal or my rule is not correct?