Enforce a Workload Policy State
On the left navigation, go to Servers & Endpoints > Workloads.
Click the link for the workload you want to change the Enforcement state.
Click Edit.
You can select Idle, Visibility Only, Selective, or Full from the Enforcement drop-down list, depending on how you want to allow or block traffic connections.
Click Save.