Thanks Omar this article is really useful when reading about FirePOWER Access control policy default actions.