# Egress blocklist

**Policy → Egress blocklist** controls which network destinations the Endpoint Suite
allows AI tools to reach directly, outside the Gateway.

Use **Download blocklist** to get the current list, and **Copy** to take it into your own
tooling. **Send test** verifies the alerting path end to end.

This is a containment control, not a firewall: it constrains the tools Sentilai manages
on machines running the Endpoint Suite. It is not a substitute for network egress
controls at your perimeter.