Chapter 15 Security Profiles : Application control : Enable application control : Messages in response to blocked applications
  
Messages in response to blocked applications
Once an Application Control sensor has been configured to block a specified application and applied to a policy it would seem inevitable that at some point an application will end up getting blocked, even if it is only to test the functionality of the control. When this happens, the sensor can be set to either display a message to offending user or to just block without any notification. The default setting is to display a message. Setting this up is done in the CLI.
config application list
edit <name of the sensor>
set app-replacemsg {enable | disable}
end