Outbound rules

Overview

This page displays all the outbound rules. You can search and add rules.

What are Outbound rules? - FAQ

Outbound rules, in the context of security groups or firewalls, refer to the set of rules that control outgoing network traffic from a system or network. These rules specify what types of connections are allowed or denied based on predefined criteria, such as destination IP address, port number, and protocol.

Outbound rules are an important aspect of network security as they determine what traffic is allowed to leave a system or network and what traffic is blocked. By defining outbound rules, organizations can enforce their security policies, prevent data exfiltration, and control the communication channels of their systems.

In cloud computing environments, such as Amazon Web Services (AWS) or Microsoft Azure, outbound rules are commonly used in security groups to control outgoing traffic from virtual machines (VMs) and other cloud resources. Administrators can configure outbound rules to allow specific types of traffic, such as DNS requests while blocking other types of traffic based on their security requirements.

Both IPv4 and IPv6 addresses are allowed in the "Source IP" field.

Valid Examples of IPv6 addresses:

• 2001:0db8:0000:0000:0000:0000:1428:57ab
• 2001:db8::1428:57ab
• ::1
• fe80::abcd:1234
• 2001:db8::/32

Invalid Examples of IPv6 addresses:

• 2001:::1 (multiple ::)
• 2001:db8:xyz::1 (invalid hex digits)
• 2001:db8:12345::1 (group too long, >4 hex chars)
• 2001:db8::1/129 (prefix out of range)

Some common configurations for outbound rules include:

1. Allowing traffic to specific IP addresses or IP address ranges: This can be used to restrict outgoing traffic to known and trusted destinations.
2. Specifying allowed protocols and ports: For example, allowing only TCP traffic on port 80 for HTTP requests or port 443 for HTTPS requests.
3. Defining custom rules: Administrators can define custom outbound rules based on their specific needs, such as allowing traffic for a particular application or service.
4. Denying all traffic by default: In some security configurations, all outgoing traffic is denied by default, and only explicitly allowed traffic is permitted.

All traffic is allowed if the “Source IP” is set to 0.0.0.0/0

It's important to carefully configure and manage outbound rules to ensure that only legitimate and necessary traffic is allowed to leave a system or network, and potential security risks, such as data leaks or unauthorized communication, are minimized. Regular reviews and updates of outbound rules based on changing security requirements are also recommended to maintain an effective security posture.