I would love to see a confirmation or warning box appear when parent processes are added to blocked lists. Accidentally blocking something like explorer.exe is too easy, and Cisco should be smart enough to know that wouldn't be something that would commonly be blocked. However, an overextended employee may make that mistake and bring down all computers with that policy. A sanity check would definitely be welcomed.
