The connections you see might be on different ports/protocols, usually port 80 HTTP and port 443 HTTPS. Probably one gets allowed by an existing rule, and the other has no rule so will ask.
Right-click on one of the connections in history and choose "Show Corresponding Rule", that will show how Google-analytics is being allowed.
Right-click on one of the connections in history and choose "Show Corresponding Rule", that will show how Google-analytics is being allowed.