Wireless POlicy

Symantec should be blocking one network connection when both wired and wireless are active.  One of our users was able to have both active.  How do I set this policy so that the user can have only one or the other and not both?

thanks