Networking Help Block out going but allow incoming

Hi ,

I am installing a blancco system that erases data from the drives this server gives IP adderess and PXE boot.
But are Router does the same.
Is there a way to block the blancco department so they can erase the drives and no other department can boot to it, but just allow internet and file access from reception to blancco department.

so I think I need to block outgoing but allow incoming.

How would this be done.

Please help.

Thanks.

About me:

I'm new in this forum, I have worked with multiple firms
You can check Management consultancy video , one of my work