Block Windows 10 P2P updates with a corporate firewall

I work for a small IT company that fix mostly Windows computers, and lately we have an huge issue with Windows 10 updates.

When a new computer enters our network and starts downloading updates, it block inteet for every other PC.

I've read that this is because of the new P2P mode, and if I manually disable that, in fact, it works.

But I can't manually disable a setting on every client pc everytime a new customer brings his pc.

Is there a way to block this behaviour with a firewall? I'm ruing Ubuntu Server with FireHol to manage inteet inside my network, and currently I didn't setup any QoS since we have plenty of bandwidth and when we download something on a computer we would like to do that at full speed.

Any thoughts?