Shouldn't a Security Gateway Be Secure By Default? [securitytheater.phoneboy.com]
From Palo Alto Networks: Best Practices for Securing Your Network from Layer 4 and Layer 7 Evasions: Block all unknown applications/traffic using security policy. My guess: probably not. Disclaimer: