thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Egress Filtering

Restricting outbound network traffic from systems to only approved destinations and protocols.

Definition

For applications, egress filtering limits SSRF impact, blocks data exfiltration and command-and-control callbacks, and prevents compromised dependencies from phoning home. It is implemented with firewalls, security groups, proxies or Kubernetes network policies.

Example

Application servers may only connect outbound to the payment gateway and the package mirror.

Exam tip

Egress control is a strong compensating control for SSRF and supply chain malware.

Related terms