centos – Using Zones in Firewalld to Block Outbound Access

I want to provide limited access to a machine which runs CentOS Linux release 7.9.2009.

For this purpose, I changed the default zone to drop (firewall-cmd --set-default-zone=drop) and applied a configuration as follows:

# firewall-cmd --zone=drop --list-all 
drop
  target: DROP
  icmp-block-inversion: no
  interfaces: 
  sources: 
  services: ssh
  ports: 5901/tcp 5902/tcp 5903/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

With this configuration, users still have access to the other computers or web. Is it also possible to block such kind of connections in Firewalld?