I just block that entire Microsoft subnet at the firewall (using pf): microsoft = "65.52.0.0/14" block in on $ext_if proto tcp from $microsoft to any port

I just block that entire Microsoft subnet at the firewall (using pf): microsoft = "65.52.0.0/14" block in on $ext_if proto tcp from $microsoft to any port { http, https }