Heh, I also have that firewall and found the 'sandbox' to be both useful and frustrating at the same time.
A tell tale sign that a program is running in the 'sandbox' is noticeable if you are running in a window; there will be a green line around the outside of the window the program is running in.
Full screen is a different story, there is nothing to show that it is sandbox mode.