Blocking of encrypted data for the budget you have set is never going to happen unless you use a default drop everything and only open up for the services you intend to use.
This may not be feasible for you however, depending on the number of outgoing services you have and the dynamic nature of the services you wish to allow out.
Please only accept my bid if you wish to implement a full drop all default and start working backwards through what you wish to allow, please also note I reserve right to retract my proposal if I deem the number of services you 'do' wish to allow is excessive for the small payment being requested.
In security, you should always take this approach and work through allowing traffic as opposed to how to block.
Best Regards.
David