This is useful when attempting to spoof a response or silently deny a request without giving a policy deny page but instead sending a RST packet back to the browser.
This policy can be installed on local policy of ProxySG. For information on how to install CPL into a local policy file, please see this KB.
<Proxy>
url.domain="xxx.yyy.zzz.com" force_deny
<Exception>
url.domain="xxx.yyy.zzz.com" exception.id=policy_denied terminate_connection(yes)