It appears you have most things covered. One additional thing that might
be a good idea is to create an app-filter for high risk score apps and
app categories and use the filter for an app block rule. Using an app
filter can be useful, because it sca...