If manually configuring outbound connections seem to difficult, I recommend launching programs with Sandboxie and change the default setting from allowing Internet access to all programs, to only the ones you want to allow. An F-Secure Safe subscription lets you install security software on Windows, macOS, Android, and iOS devices, but it’s feature-poor compared to the best cross-platform competitors. Then you only have to worry about the outbound connections as they will be automatically allowed on their way back in so to speak. I think the most important thing for home users is to use a router to block all incoming connections.

Configured outbound rules with the help of a program called WFC (Windows Firewall Control).

Changed outbound from the default Allow (all) to Block.

Disabled all inbound rules except Core Networking.

I have no problem with that alongside a NAT router with SPI firewall, but I've also tweaked a lot of things regarding firewall & networking: Rusli, yes it's still Windows Firewall + F-Secure's Advanced Network Protection + DeepGuard. Please read and follow prompts closely to ensure proper installation of F-Secure SPC and removal of the other software.

F secure 2015