The rules you define in Neuvector are designed to be a narrow scope of explicit allow rules. You can then decide to alert (Monitor mode) on rule violations or alert and deny (Protect mode)