application control

Good day all,

I will appreciate some feedback on how the application controls on fortigate work for traffic that is coming into the organization.

we have app control , filtering used for user traffic that gets to outside world. if we want to prevent attacks from outside into our organization how should app control features be used?

Thanks in advance.