Comment by mousetree

It’s at the network level. It will block clients from connecting to the destinations on the network. You don’t need to modify any applications at the destination.