You now have a simple way to gain visibility into, control usage of, and safely enable applications in Security policy rules: Policy Optimizer. This new feature identifies port-based rules so you can convert them to application-based whitelist rules or add applications to existing rules without compromising application availability. It also identifies rules configured with unused applications.

Policy Optimizer

information helps you analyze rule characteristics and prioritize which rules to migrate or clean up first.

Converting port-based rules to application-based rules enables you to whitelist the applications you want to allow and deny access to all other applications, which improves your security posture. Restricting application traffic to its default ports prevents evasive applications from running on non-standard ports. Removing unused applications from rules is a best practice that reduces the attack surface and keeps the rulebase clean.

You can use this new feature on: