Network Security Policy-Control Rule-No "ask" option

Feedback/Comments/Announcements/News
1

I’m trying to set some network control rules, and all I get is the option to block or allow. Has CFP been compromised?

2

Actually this is exactly what I am trying to do:

For some reason CFP was blocking all internet access. So I deleted the Network Security Policy. I know want to define some new custom rules.

Network>Security>Policy
Global Rules>only BLOCK and ALLOW are options, not ASK.

Why?