> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> About Egress

Egress Security in Aviatrix PaaS involves monitoring network traffic to the
Internet and protecting the traffic using Distributed Cloud Firewall Rules,
SmartGroups, and WebGroups.

VPC/VNets transition through several protection states: discovered, monitored,
and protected.

<Note>
  A Monitor Egress Traffic wizard is available on the Dashboard to walk you
  through the Egress Security workflow:

  * Onboard selected VPC/VNets with a selected Performance Size
  * Enable Egress Monitoring on those VPC/VNets
</Note>

## Prerequisites

* Onboard cloud accounts
  * [AWS](/docs/cloud/platform-administration/onboard-offboard/aws-cloud-account-onboard)
  * [Azure](/docs/cloud/platform-administration/onboard-offboard/azure-cloud-account-onboard)
* [Onboard VPC/VNets](/docs/cloud/platform-administration/onboard-offboard/vpc-vnet-onboard)

## Egress Traffic Overview

On the Egress > Overview tab, view your current Egress Security Score and the
protection status of your VPC/VNets.

## Egress Traffic Analysis

On the Egress > Analyze tab, view the Top Egress Rules Hit, Top Source IPs, Top
Destinations, and Top Domains discovered in your traffic flows.

## Egress Traffic Protection

On the Egress > Protected VPC/VNets tab, onboard, monitor, and protect your
VPC/VNets. After VPC/VNets are monitored:

* The top traffic destinations, domains, and offenders are displayed on the
  Security > Egress > Analyze tab.
* They are added to a Monitored VPCs SmartGroup and a Monitor DCF Rule.
  Subsequent monitored VPC/VNets are added to the same SmartGroup and Rule.
* Their status changes to Monitored on the Protected VPC/VNets tab.

After VPC/VNets are protected:

* The VPC/VNets continue to be monitored as per above.
* They are added to a Protected VPC/VNets SmartGroup and a Protected VPCs rule.
  Subsequent protected VPC/VNets are added to the same SmartGroup and Rule.
* A new WebGroup is created for the selected trusted domains.
* A new SmartGroup is created for the selected VPC/VNets.
* A new "permit" rule is created that contains the trusted domains.
* They are included in the Egress Security Score calculation.

## Related Topics

* [Egress Security Overview](/docs/cloud/security/egress-nat/egress-security-overview)
* Egress Security Score Calculation
* [Monitor VPC/VNets](/docs/cloud/security/egress-nat/egress-monitor-vpc-vnets)
* [Protect VPC/VNets](/docs/cloud/security/egress-nat/egress-protect-vpc-vnets)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.