This is the point where you are ready to start the real policy configuration stuff. When you open the FSM Traffic monitor on one side and Policy Editor on the other side, you can watch what is getting let out trough the TCP/UDP proxy and start adding custom rules for that in policy editor. The goal has to be to write so many explicite rules, that practically nothing is let out trough the TCP/UDP proxy anymore. Once you are close enough to that goal, you just turn off the TCP/UDP proxy and only explicitly defined traffic will be able to leave the network from this point on.