They probably blocked all access to the service control manager (ntsvcs) for contained applications. You can check the HIPS logs while having HIPS in safe mode, to see if either the namedpipe or rpc control interface, is being listed as a blocked event. This blocking is probably what breaks network access.
This is assuming they added the named pipe to protected files or the windows managment file group like they did with xcitium client security.