This Metric returns any rules on a SonicWALL of any flavor that deny Traffic outbound to the WAN port
TSRAccessRules[].rules[?contains(Name, 'Deny') == `true` && (Parent == 'LAN -> WAN')].{Name: Name} (SonicOS 6.5)Firewall.AccessRulesIPv4[?contains(From, 'LAN') && contains(To, 'WAN') && contains(Action, 'deny')].{From: From, To: To, Action: Action, "Service Name": ServiceName} (SonicOS 7)