[dplax]

Filtering by ports and addresses is what I meant for outbound filtering on a hardware firewall. There's no easily available way for a hardware firewall to know whether a request to get a web page comes from one web browser or another. However you can leave just a select few ports open on a HW firewall and even then control what type of requests go through there through protocol analysis. There is no need to let FTP-type traffic through on port 80...