> Most firewalls only watch what comes in

Uh, no they don't. I haven't used a firewall in 20 years that hasn't had both inbound and outbound monitoring lol.