Set it as a local proxy to channel all network access through it and you can selectively block any app from accessing any network, or isolate it.