Is it possible in print using a firewall to completely block access to the network to the program without prohibiting its browsers (Windows)?

Question

firewall

In any of the firewalls I have seen, there is an opportunity to deny the program access to the network. Nevertheless, there are a lot of system programs like svchost, through which a program can access the network bypassing such rules.
I cannot deny access to the network to svchost and the like - the browser will stop working and much more. How to be? How to deny access to the network, say, notepad, but leave it for browsers? Is the task feasible? Are there programs that can do this? Because if not, then all firewalls are worthless, because maybe they won’t let anyone “enter”, but they won’t interfere with “exit”.