Currently, the default behavior is to allow AppAware traffic. However, if a user blocks a category like "Webmail & Chat" and wants to allow only specific applications within that category, they must manually add the associated domains to their Allow list. This can be a bit cumbersome, an alternate option or consideration is below. The introduction of three possible statuses for AppAware applications: Unmanaged (default): Blocking is determined based on existing category/block list configurations. Allowed: Explicitly allows traffic to the domains associated with the application, regardless of category blocking. Blocked: Explicitly blocks the domains associated with the application, even if the broader category is allowed.