The Restrictions payload in Configuration Profiles for iOS includes the ability to allow or disallow Facetime.
If this is something you'd prefer only to manage for internal devices then blocking Facetime access at the firewall would make more sense. When folks leave your network they could still use it.
