I can use
nmap to find open ports on a specific client with following command:
nmap -sC -sV [IP]
This command only shows incoming open ports, I'm looking for a similar command to find outgoing open port. For example I want to know whether the client has web browsing access (80) or not.
I imagine there should be a way to send web server traffic to the client and analyze the response and somehow based on that you can determine if the port is open.
Please let me know if there is anyway to figure this out.