Egress Allowlist

Objectives

See the difference between an agent that can reach any host and an agent whose outbound traffic has an allowlist. This lab is a placeholder. The exercise is coming in the lab.

Prerequisites

Lab 01, once it is published, is the intended warm-up. A local environment you can throw away. Exact prerequisites are coming in the lab.

Setup

You will point the same agent at a short list of allowed destinations and at least one destination that is not on the list. The policy format is coming in the lab.

Attack

You will ask the agent to call a destination that the allowlist does not name, and record whether the call leaves the lab network. The request itself is coming in the lab. Run this only in the isolated local environment.

Defend

You will keep the allowlist in place and repeat a call that is on the list, so you can see a permitted path beside a refused one. The allowed destination is coming in the lab.

Measure

Record which attempts connected and which were refused. The score for this lab is coming in the lab. This page does not publish sample results.

Cleanup

Remove the lab policy and any local listeners. The commands are coming in the lab.