[NEBULA] Mobile APP management

I think your issue will be solved if you move rule 2 on top of rule 1, as mentioned by @WebberIT

I don't think the application patrol profile by itself makes a judgment, but if for the firewall rules you put "src: any" from the device point of view, every traffic will match this rule and the device doesn't need to continue with the other rules that are below.

So always, either application patrol or not, better leave the "any" rules at the bottom.

Btw, this is the same WebberIT told, credits to him