Safe rules for svchost and System

How to set safe CIS firewall rules for svchost and System? I use internet for surfing only.

Maybe you can have a look at these two topics, this guy seems to know what he’s talking about:;msg763569#msg763569;msg763144#msg763144

I have always set mine to Outgoing Only, and have never experienced and issue.

Thank you for reply!

Thank you for relevant information!