Question with outgoing connections

when I install a software that has a valid certificate, it is automatically declared safe, and can communicate freely without a notice.

For example, for ITunes I do not want that. What would be best for me is that EVERY application creates a pop up and I can deny or allow an the firewall learns that. I definitely do NOT WANT any program to be able to make outbound connections withoit me allowing that.

I was not able to find a solution for that. Can anyone pls help me with that?


Set the firewall at Custom Policy Mode also change alert settings if you wish more detail settings in the rules.