Via Network Rule (or another rule type), is it possible to monitor and block (via protect mode) egress traffic - except for one? So, I want to allow specific egress traffic but block all others