Application Scope
The recommended deployment method is applicable to initial deployment of security policies when a firewall is connected to a network for the first time and optimization of security policies. If the matching condition of a security policy is inaccurate, for example, any is specified in the matching condition, you can use this method to define an accurate matching condition.
Generally, source and destination IP addresses, source and destination security zones, and services must be specified. The user, application, URL category, and time range are optional.