Based on my testing and researching, source IP addresses are being translated by Web Protection module before passing them to Application Control. So..."FOR" section in an Application Control Rule seems to be irrelevant in current UTM architecture.
I assume that you have paid support, so please create ticket with your reseller or with Sophos support directly (if you have Premium support).
Based on my testing and researching, source IP addresses are being translated by Web Protection module before passing them to Application Control. So..."FOR" section in an Application Control Rule seems to be irrelevant in current UTM architecture.
I assume that you have paid support, so please create ticket with your reseller or with Sophos support directly (if you have Premium support).