egress filtering
termsecuritycloudnetworking
Controlling what may leave the network, not just what may enter - the outbound rules that starve malware of its command channel.
The most neglected firewall direction; exfiltration and C2 both need a way out.