Currently you can block or you can detect but allow to run (alert) but you cannot do one for some categories and the other for other categories. Customer would like to block something like voip but alert only on instant messengers.