Which appliance is usually positioned at the edge of a corporate network and regulates outbound traffic according to organizational policies?

• A. Web Application Firewall (WAF)
• B. Proxy Server
• C. Forward/Transparent Proxy (Outbound traffic)
• D. NAT Gateways

Answer: (C)

Regulating outbound traffic at the network edge is achieved by placing a proxy at the perimeter that handles requests from internal users to the internet. A forward proxy (often deployed as a transparent proxy) sits in the path of outbound traffic and enforces organizational policies on what sites and content users can access, who can access them, and how those requests are logged or scanned. It can require user authentication, apply content filters, and block or allow traffic based on corporate rules, giving IT control over outbound communications.

WAFs are designed to protect web applications from malicious inbound requests, not to govern general outbound traffic from the entire network. NAT gateways, while they sit at the edge, mainly perform address translation to map private addresses to public ones and do not enforce policy controls on what destinations can be accessed. Therefore, the proxy solution best fits the role of regulating outbound traffic according to organizational policies.