baseline application behavior

Could it be that application management and security are converging? How many times have you tried to use an application that can’t get through the firewall?  If these two fields are merging, will it fall largely on the firewall or the application team?