I just block that entire Microsoft subnet at the firewall (using pf):<p><pre><code>  microsoft = "65.52.0.0/14"

  block in on $ext_if proto tcp from $microsoft to any port { http, https }</code></pre>