Hi tcp-1514 traffic will not match the policy, because of service is
http in the policy. All criteria should be matched. you should write two
policies to deny http and permit tcp1514 : policy1: source:X, dest:Y,
service:http, action:deny --> this wil...