Firewall Egress Policy

Firewall Egress Policy is a networking outbound control that decides where workloads may send traffic for network traffic filtering. It uses allowlists, identity, and logging so teams can reduce exfiltration and SSRF risk while keeping evidence, reliability, and public-safe operational boundaries clear.

“The network engineering team used Firewall Egress Policy when a new rule matched traffic, so the team could reduce exfiltration and SSRF risk before traffic crossed a service boundary.”