Why would a traffic log list an application as "not-applicable”?

Why would a traffic log list an application as "not-applicable”?
A . The firewall denied the traffic before the application match could be performed.
B . The TCP connection terminated without identifying any application data
C . There was not enough application data after the TCP connection was established
D . The application is not a known Palo Alto Networks App-ID.

View Answer

Answer: A

Explanation:

traffic log would list an application as “not-applicable” if the firewall denied the traffic before the application match could be performed. This can happen if the traffic matches a security rule that is set to deny based on any parameter other than the application, such as source, destination, port, service, etc1. In this case, the firewall does not inspect the application data and discards the traffic, resulting in a “not-applicable” entry in the application field of the traffic log1.