The integration of Azure HDInsight and Azure Firewall, in order to restrict outbound traffic from the cluster to unauthorized destinations, is now generally available.
In order to prevent large data transfers from the HDInsight clusters to unauthorized destinations, configure your subnet and use Azure Firewall HDInsight FQDN tag. For information on setting this up, read the documentation.