As far as I know GesWall doesn’t work like sandbox. I think it restricts applications actions to a set of predefined rules and limits their access to system resources.