Technical Tip: Scanning order for application control

[bbae]

Description	This article describes the scanning order for application control.
Scope	FortiGate v7.2 and above.
Solution	An Application control (IPS engine) on FortiGate inspects incoming traffic for signature-matching. The one scans the traffic for matches in the following order for the application control profile: Application and filter overrides: The application control profile considers those first if any application overrides or filter overrides were configured. The inspection order is operated to scan top to bottom like the Firewall policy. Categories: Finally, the application control profile applies actions configured before in the category selected by inspection. Note: It would help to consider other scans like web filtering, although an Application control is done. Because even if the application control verdicts it as allowed, web filtering could still block it.