Policy manager has setting to "enable"/"disable" and "lock" feature named "Connection control" for client. In case settings is set to f.ex "enabled" and "not locked" on PM, there is no possibility for user to disable this setting on client side. I think it would be good to have this setting on client side under Browsing protection tab so that user can then choose if this feature is enabled or disabled (when policy allows user decision).
Why: Because some users have found this feature "annoying" when causing unnecessary popups and confirms with sites that do not need this feature. Adding sites to list of trusted sites is not a preferable solution in this case. On the other hand, if some users like to use this feature, then they can opt it active themself.