to reproduce the problem: delete all rules in the firewall, set it to “ask” and reboot immediately, then see the result ;D you can’t login anymore as instead of getting prompts to allow mandatory MS connections (system connections mainly, 127.0.0.1 ), everything is most likely blocked. Way out, reboot in safe mode, uninstall AIS. And reinstall AIS 
wow interesting find.
wanted to add to that that no matter how many rules get applied to an application, only one will appear in the GUI. Details found in the rules.xml files aren’t reflected in the GUI >>> the GUI so far gives very poor information about network policies. And the xml file is so cluttered that it’s unreadable, unless you got the patience ;D