create FW rule for virtual apps

I would like to ceate a firewall rule requiring all installed virtualised apps to ask for access as in mouses post https://forums.comodo.com/beta-corner-cis/using-the-sandbox-for-different-purposes-under-development-t88116.0.html;msg635309#msg635309

could someone pls give steps to achieve this
thanks in advance