## Overview This epic extends the application-level network isolation work (issue #578048) by making the network isolation configuration more flexible and user-friendly. It focuses on allowing users to configure allowed domains/IPs and providing visibility into blocked connection attempts. ## Goals 1. **Make network isolation configurable** - Allow users to define custom allowlists for network access through the either through a yml file or UI 2. **Provide visibility into blocked attempts** - Log and expose failed network access attempts so users can review and adjust their configuration 3. **Provide coverage for custom images** - Even if the user uses a custom image they should be able to use the network security if they desire to do so