How to create an 'allow' & 'block' rule for all TCP requests

[rhamersley]

To enhance the security for out company and protect against potential egress vulnerabilities,  How can I perform the following...

* Create an 'allow' rule for all TCP requests, permitting communication only with our companies internal IP addresses.

Also...

* Create a 'block' rule for all TCP requests to external public IP addresses.

[alemabrahao]

Just like any firewall, you must place the most specific rules at the top, that is, you must create rules allowing everything you want and at the end you create a deny any any rule.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewal...

I also suggest that you carry out all tests in an homologation environment before applying it to the production environment.