Unfortunately I am not aware of any out-of-the-box solution, you need to dive more in technology you want to block (which sites? which ports? which applications? etc.) and then resolve the sub-problems with the different required technologies (application control, firewall, etc.).