Thanks for posting your question here. The categories are red and unable to be checked because they don't exist in WSUS yet, so they are not ready to have anything synced with them. As soon as the categories sync over to WSUS, those should appear black like the others and should be selectable/applicable.
If you wait for quite a while, go back into the window and they are still showing as not synchronized, you'll want to check the status of your WSUS sync to see what is preventing that from finishing. Feel free to open a support case at support.ivanti.com if we can help with that at all.
The main cause of this looks to have been resolved by changing the WSUS account used in SCCM. I'm not sure what was changed about the account in use, but checking the wsyncmgr log showed an account error.