Hi,
I will probably partially answer this question while providing the information.
Current thinking is "web security" only covers website surfing! In actual fact web security should also cover mail, currently but "mail security" has its own tab.
So based on that there are two distinct security groups why do POP3 and MAIL appear in the web security page?
The attached screen shots tell the story in graphic colour.
Ian