You can utilize Intune to create Windows Defender Firewall Rules that block the FTP port (TCP Port 21) on the device. By creating an Inbound/Outbound Deny Rule and deploying it through Intune, you can effectively restrict FTP access. For a detailed, step-by-step guide on creating Windows Defender Firewall Rules using Intune, please refer to the following link: https://cloudinfra.net/how-to-create-windows-defender-firewall-rules-using-intune/.
---If the response is helpful, please click "Accept Answer" and upvote it.---