How to Create a Service Control Policy
Navigate to the Services Security Module
Navigation: Policy > Services

Select Block or Allow
To begin blocking or allowing access to content based on Services, navigate to the body of the Services Security Module shown above.
Once here, search for the specific Service which you would like to block or allow access.
For each Service you will be making two block or allow decisions, one "Outbound" (Traffic coming from your network to the Internet) and the second "Inbound" (Traffic Coming from the Internet to your Network)
Example:
Let's assume you would like HTTP traffic to be allowed outbound from your network to the internet, but not inbound from the internet.
You would do this simply by selecting the Green Check = Allow for the HTTP service under "Outbound" and the Red Minus = Block for "Inbound"

After these two block and allow decisions have been decided for each Service in your policy change, you can now proceed to Step 3.
If you need to create a custom service toggle in the Services security module, please follow the "How to Create a Custom Service Toggle" Guide.