#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/outbound-acl-placement

░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░█████████████████████████████████████████████████████████████████████████████████████

#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/outbound-acl-placement

Repovive

Outbound ACL Placement - ACLs and Firewalls | Network Design | Repovive

Repovive.

Network Design26 sections · 911 units44h total

Open in Course

Outbound ACL Placement

Filtering exiting traffic

An outbound ACL filters traffic after the router makes its routing decision, just before packets leave an interface. The router has already done the work of looking up the destination.

Use outbound ACLs when the traffic source varies but the destination is fixed. For example, on a server-facing interface, you might allow only HTTP responses.

interface GigabitEthernet0/1
  ip access-group ALLOW-WEB out

Outbound ACLs don't save routing resources but can still enforce security policies.