Advanced Application Controls
Some web-based applications offer the option to allow users to access the site but not to perform activities such as uploading, downloading, posting, or sharing content on those sites.
Depending on the destinations you select in an internet access rule, you will see an Advanced Application Controls section.
This section appears only if destinations added to the rule include one or more applications that allow granular controls on activities. These applications must be included in application lists or application categories selected as destinations, or be individual applications selected from application categories.
Use these advanced controls if you want to allow access to the site but block certain actions. If you don't want to allow access to the site at all, select the application, Application List, or Application Category in the destination list for the rule.
Note: Advanced controls for these applications have no impact in “Block,” “Warn,” or “Isolate” rules.