From the alert message regarding an app trying to connect to the internet it would be nice to have an option to create a custom rule which would capture automatically the application, the source and destination, the protocol and port information. Currently you can allow, deny or treat the application as a predefined category. If you want a specific rule for an application, it has to be created from scratch.