Which two features does the application firewall provide? (Choose two.)

The application firewall feature in Cisco SD-WAN performs deep packet inspection to identify and classify over 1400 Layer 7 applications, enabling granular control over application traffic.

Based on the Layer 7 classification, the application firewall allows administrators to create policies that explicitly block or permit traffic for specific applications or broader application families, enhancing security and traffic management.

Numbered sequences of match-action pairs describe a general policy configuration method, not a specific feature of the application firewall itself.

While firewalls handle Layer 4, the primary distinguishing feature of an *application* firewall is its ability to classify and act upon Layer 7 applications, and the '1000+' number for Layer 4 applications is not a specific feature or count of the SD-WAN application firewall.

Application match parameters are configuration elements used to define policies, not a specific feature provided by the application firewall itself.