It decied by wherer your mailboxes hosted.
For Exchange on-premises mailboxes, you could block MAPI and Outlook anywhere for them.
For Exchange online mailboxes, they hosted outside of your network by default. You could use Conditional Access to limit them by IP range(within your organization)