service customization

The outbound rules allowed in windows firewall require the service customization to be set to allow all programs and services. Any reason this doesn't work for "apply to services only" for an executable such as internet explorer? Is there some other program that is needed? The security audit...