firewall setup for workstations

Our workstations are generally not permitted to have internet connection.  How would I set up a firewall router that will only allow traffic to the Adobe license and upgrade servers? Is there another solution that would isolate the editing workstations from the internet?