[webmaven]

Seems like that's something you would design into the device itself (or rather, its software), whitelisting allowed domains or IPs.

[GordonS]

I've done exactly this before when building an IoT device.