why svchost & lsass processes are by default disabled via TMG firewall client settings ?

hi friends

in TMG console, networks , right pane, :configure TMG client settings" , why svchost & lsass processes are by default disabled via TMG firewall client settings ?

when these 2 proccesses are disabled, which applications are prevented from communicating with TMG & with internet in result ?

thanks in advance