Just moved my post from the “Firewall” forum section into this one, as I think it rather belongs here:
I would like to suggest that the pre-selected standard settings of the “Firewall Alert” popup should always be “Block this request” with “Remember my answer” unticked. Right now CIS remembers the settings of the most recent popup as the pre-selection, which in my opinion doesn’t make much sense.
This would help to avoid accidental rule creations and would be the safest alternative. If I intend to allow access or even create a rule, this should be a very conscious decision in my opinion.
Also, this would increase the safety of all those not-too-tech-savy (or mindless) users who just click “ok” on everything that appears on their screen.