What are egress and ingress traffic?

Ingress traffic is data coming into your network from outside; egress traffic is data leaving it. Most security effort traditionally goes into ingress, blocking attackers at the door. Egress deserves as much attention, because almost every attack must send something out: malware calling its control server, stolen data being uploaded, or staff sending company files to unapproved services. Simple egress rules, such as allowing outbound DNS only from your own resolvers, already help. NetSenX watches egress closely: beaconing to outside servers and unusual outbound data volumes raise alerts on every plan.

← All 69 questions on What is…? Network and security termsAll topics