But this host (blob.core.windows.net) is well-known parent hostname for all storage accounts, offered by Microsoft Azure (with their Azure Blob Storage feature). It should not be blocked. Specific subdomains (like something.blob.core.windows.net) should be blocked, not common parent host.