Blank applications in Traffic logs

I encountered cases when troubleshooting for blocked traffics where the applications are empty. 

Under what scenarios will the application be empty? And are there any ways to allow the traffic beside using ANY for applciations in the firewall rules?