block internet access for all sandboxed processes

1.Please add an option to the sandbox settings.

2.If the user ticks the box, then CIS enables this rule automatically.

+100000000000

:-TU