You can use the Boolean operators AND, OR, and NOT to create filters with many different criteria. You can put multiple Boolean expressions in parentheses.
If you enter more than one criteria without a Boolean operator, the AND operator is implied. When you use multiple criteria without parentheses, the OR operator is applied before the AND operator.
Examples:
blade:"application control" AND action:block
192.168.2.133 10.19.136.101
192.168.2.133 OR 10.19.136.101
(blade:Firewall OR blade:IPS OR blade:VPN) AND NOT action:drop
AND NOT
criterion.source:(192.168.2.1 OR 192.168.2.2) AND destination:17.168.8.2
17.168.8.2
. This example also shows how you can use Boolean operators with field criteria.