A better strategy (if your edge device will support it) is to start with blocking outbound all/all, then selectively allowing outbound traffic based on IP ranges.


Indy
"Boss"

Indy's Blog

www.BestForYourPractice.com
Our Name is Our Creed