If both WebBlocker and Application Control are configured in the same policy, and the traffic matches for a website and application, the Application Control action might or might not trigger first. Which action triggers first depends on several factors, such as the number of packets required to identify the application, and how much time it takes to look up and return a category for the URL. Consider facebook.com. All access to facebook.com can be blocked in WebBlocker if the “personals and dating” category is blocked.
If your company policy is to restrict all access to Facebook, it may be appropriate to block it in WebBlocker. You can either block the “personals and dating” category or add a WebBlocker exception. Application Control provides more granular control over applications and their associated subfunctions. With Application Control, it is possible to allow access to Facebook, but not allow access to Facebook Games.