An administrator is reviewing the Security policy rules shown in the screenshot. Why are the two fields in the Security policy EDL-Deny highlighted in red?

Antivirus inspection being enabled does not typically cause fields within a security policy rule to be highlighted in red.

Having "any" for destination zone, address, and device are common configurations and do not inherently cause red highlighting.

While the action is Deny, the action itself does not cause red highlighting of other fields in the rule; Deny rules are typically shown with a specific icon or status but not color-coded fields.

In Palo Alto Networks firewalls, administrators can assign tags to security policy rules. These tags can be associated with specific colors, which then highlight the rule or specific fields within the rule in the web interface for easier visual identification.