Network Security Policy-Control Rule-No "ask" option

I’m trying to set some network control rules, and all I get is the option to block or allow. Has CFP been compromised?

Actually this is exactly what I am trying to do:

For some reason CFP was blocking all internet access. So I deleted the Network Security Policy. I know want to define some new custom rules.

Global Rules>only BLOCK and ALLOW are options, not ASK.