This field provides the response data before the firewall
App-ID has identified the traffic.
Additional Details
Firewall traffic
that cannot be identified by App-ID due to inadequate data for signature
matching is designated as insufficient data in
the application field of the traffic logs.