You can still have all outgoing traffic be sent through a proxy that denies any target that is not explicitly on the allowlist.
You can still have all outgoing traffic be sent through a proxy that denies any target that is not explicitly on the allowlist.