Svchost set to outgoing only yet its still blocked in logs on custom policy?

Svchost set to outgoing only yet its still blocked in logs on custom policy?

Same applies to iexplore.exe

Apparently steam needs iexplore and svchost to work.

It allows when disabled…