Many organizations use "the web" as you refer only marginally. The MITM the Outside game works great if you consider the Outside untrusted and only whitelist wh

Many organizations use "the web" as you refer only marginally. The MITM the Outside game works great if you consider the Outside untrusted and only whitelist what you need. Other traffic (both ways) gets inspected for viruses, phishing, information exfiltration, software/hardware call home and whatnot and denied unless proven innocent. This is easier on the users than blocking the outside outright while providing reasonable protection.