What is the best way to block access from a Windows workstation to external sites and file transfer locations?

How can I restrict access on a Windows device to external file sharing systems and file transfer protocols like FTP, SFTP, SSH, etc. I would like to eliminate as many external file sharing capabilities as possible to stop data exfiltrating from the environment.

access block can capabilities cybersecurity data device etc external file file sharing file transfer ftp protocols sftp sharing ssh systems transfer what is windows workstation