It’s not hard blocked, but it’s all logged - if I see a user on my network doing 100% of their traffic via port 443, or any specific port, it sets off an alert (i.e. traffic going out on 443 exclusively, but the client IP never hits my local DNS server, that’s suspicious, since all port 53 dns traffic is blocked). At…