None
To block all inbound and outbound traffic that has not been expressly permitted by firewall policy.
Source(s):
NIST SP 800-41 Rev. 1