Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.How are UTM features applied to traffic?

One or more UTM features are enabled by selecting their corresponding security profiles (e.g., Web Filter profile, Antivirus profile, IPS sensor) within the 'Security Profiles' section of a firewall policy.

While UTM features have system-wide configurations, the method of application to traffic is by referencing the UTM profiles *within* a firewall policy, not by identifying policies from within the UTM feature's configuration.

Enabling UTM objects and setting a default does not automatically apply them to traffic; they must still be explicitly referenced by a firewall policy.

The firewall policy dictates which UTM object it will use, meaning you define the UTM object and then reference it in the policy, rather than assigning policies to UTM objects.