Restricting outbound traffic on internal network

Does anybody build firewall rules for what outbound traffic is allowed on the internal/application firewalls or do you just restrict inbound traffic?
If so, what is the rational behind it? What connections do I need to realistically worry about my users establishing that isn't being established over a port that is already going to be necessary to have open?

application build connections cybersecurity firewall firewall rules firewalls internal internal network isn network port rules traffic what is