what is difference between application and service in palo alto?
The "service" option is a second layer of security to allow application on their well-known port ( applicatipn default) or any port ( any). If you have configured multiple "services" based on the port number, you can select only related application on the policy to allow that traffic.