there used to be windows GUIs for forcing new connections to ask, but i haven't seen anything like it. I can't recall the name of the one i used to use, but it scored perfectly on shieldsUp - oh, Zone Alarm.
Littlesnitch iirc is macos only, but it sounds lovely for this sort of thing.