Heads up, something changed in the MX security appliance Layer 7 categorization and traffic handling over the weekend of October 1st, 2022. We came in Monday, the 3rd to support tickets from ClientVPN users who could no longer RDP to their desktops, timeclocks that could no longer communicate with their cloud service providers, and an application that no longer functioned properly across the SDWAN. Timeclocks were being blocked as "Citrix Static" Layer 7, remote application was blocked as some form of Peer-2-Peer, and the RDP was blocked as RDP even though it had worked forever for client VPN prior to this weekend. Just be on the lookout if you have L7 applied.