[MT-AU Public] Working with 3/4G.

I have just had to put a hap lite in to be a client to a Vodafone 4g wifi modem and bring that connection back into my network via Ethernet. All works really well but wondering if anyone has any experience with firewall rulesets and or application filtering to block big data use such as MS/Apple updates, apple iCloud backups etc etc. I've been thinking about just some big IP range drops for the big companies such as Apple and MS and AWS but thought maybe there is a better way. Anyone.