Answer your first connection prompt, and what each lifetime means

When FireAI asks

In Alert mode, the first time an app tries to reach a destination with no rule for it yet, FireAI pauses that one connection and shows a prompt: the app’s icon and name, the destination, and its country and company when FireAI can tell.

Block or Allow

Two buttons: Block and Allow. FireAI highlights whichever one it leans toward, from simple signals like a known tracker domain — the choice is always yours to make.

How long the answer lasts

Click Options before you decide, to choose how long your answer sticks:

• Just this once — only this one connection; nothing is saved.
• Until the app quits — kept while the app keeps running; FireAI asks again the next time it opens.
• Until I restart — kept until you restart this Mac.
• Always — a permanent rule you can find and change later in Rules.

And which address it covers:

• Only this address — this exact host only.
• The whole website — this domain and every subdomain.
• This server (IP) only — this one IP address.
• Anywhere — every destination for this app.

See why FireAI is asking

Click Details for the exact address, port, how the name was learned, the app’s code-signing status, and — if the on-device AI is turned on — which way it leans and why. When FireAI has background on that kind of destination, a Why block this? button explains what that kind of server usually sends and why people tend to block it — see “Why block this?” for more.