One will still allow programs access, but it's a very short list (even more restrictive than the 'normal' setting.) and the other basically disconnects the computer from the internet. Or so the computer thinks... The connection is still there, but nothing gets in or out.
Now, this is how it was way back when I used it. I know there have been several versions since then, so I'm not exactly sure if it's still like that.