1.3.5

1.3.5  ::  Restrict outbound traffic from the cardholder data environment to the Internet such that outbound traffic can only access IP addresses within the DMZ.

This is another way of stating 1.3.2