Restrict Outbound Network Access

Info

ID: MS-M7037
MITRE mitigation: M1037

Use egress filtering and firewall rules to control and limit outbound traffic from applications and functions. Restricting outbound access prevents data exfiltration and unauthorized use of compute resources.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7024	Server side request forgery (SSRF)	Restrict outbound requests to a predefined list of trusted domains or IP ranges.
MS-TA7028	Data theft	Use egress filtering and firewall rules to prevent unauthorized data exfiltration.
MS-TA7031	Resource hijacking	Limit outbound traffic from applications and functions to explicitly approved domains or IP ranges to prevent misuse.