I'm contacting GFI Software Support.
I'm asking about HIPS option.
he's said:
"Block or Allow with Notify" is added because there are users that wanted to informed if there are files that are detected. the file might be legitimate to the user and he does not want it to be blocked. the file might also be malicious and the user can select block
"allow or block" simply allows or blocks the file/traffice without notice. if this is selected the user does not have any option to allow or block the file. there are cases where a program or application is not working because it got blocked
so, I think, the user is given a chance to allow or block the traffic ,or files.
can create from the vipre window - you can create rule for Applications, Ports, Network ,or Gateway.