Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
That is a good rule, but remember that if a machine has a proxy avoidance app like Psiphon then that rule will not work. The VPN app like this one hides the port traffic from the firewall because it cannot fully inspect traffic in the SSL/HTTPS chan...
