I get the impression WSA categories files as good, bad and unknown. Good = allowed, bad = blocked, unknown = limited/monitored/sandboxed in some way. Is that correct? If so can the settings be tweaked to deny rather than limit unknown? I had thought cranking up heuristics might work but doesn't seem to. Thanks