Does anyone know if the packet capture feature is pre- or post- rule application? I'm trying to identify exactly what XG is tagging as TOR Proxy traffic (I think it is a Google SSL tunnel used for Apps Outlook Sync) but I'm not seeing any packets in PCAP that match the destination IP/port shown as being denied in the App Filter logs.
This thread was automatically locked due to age.
