System Preferences > Security > Firewall only gives you the option to "Allow Incoming Connections" to applications of your choice. My understanding is that Mac OS X does not have a built-in way to block "Outgoing Connections" on a per application basis.
What software have you installed on clients to provide this functionality, and how well/poorly has it functioned?