Seems like that's something you would design into the device itself (or rather, its software), whitelisting allowed domains or IPs.