Limiting access to the internet on student computers

Hi, we are about to launch Summer Camps using Construct. We have a bunch of computers and we want to make it so the students essentially have NO access to anything outside of Construct. Since we are required to give Construct access to the internet once a week to keep the license intact, we do need to have Construct connected. I've read that this can be done with Firewalls but since Construct runs in a browser, I imagine there might be some nuance that I haven't figured out yet. Has anybody tried this or have any advice about how to do this? Thanks!

The easiest approach is to block the Internet but allow domains of the form *.construct.net. There's more information (including a full list of domains Construct may use) in the education FAQ.

Alternatively a more low-tech approach would be to get in early on a Monday morning, turn the Internet on, reload Construct on every device, then turn the Internet back off.