I do not think this is a difference between using the default class class-map and creating an acl matching ip any any. Can someone correct me because all FP documentation says create class-map sfr. policy-map global_policy class class-default sfr fa...