Segregate Microsoft 365 consumer and enterprise accounts

[rashid_ali]

Dear Experts,

We have planned to deploy MS 365 services in our organisation. As per our org policy no public emails are allowed to prevent DLP. Same is controlled using URL and application filtering of the firewall. And the MS 365 services uses shared URL's for both consumer (personal) or enterprise (official) accounts. 

Now if i allow the URL's then user will be able to access hotmail personal accounts as well.

I need to control the access at firewall level to just only allow MS 365 enterprise services. (FR: fortiOS provides this segregation for google G-suite)

Any workaround or experience shared will be highly appreciated.

Regards,

Rashid Ali