How to deny network access for all applications

GeSWall might be configured to restrict network access for all applications including trusted. Such configuration enables using GeSWall as a firewall.

Once the resource definition is applied, network access is blocked for entire system and you should grant it specifically for individual applications including trusted.

System, services.exe, svchost.exe, lsass.exe and winlogon.exe are exclusions. The applications always have unrestricted access regardless the rules. That is required to provide core networking services such as DHCP client, DNS client and so on.