Block local traffic for devices, but allow internet

I would like to allow the kid’s friends internet via our WiFi, but block local connections like to the NAS. Alternative is to create a guest network, but then I would lose track of them as Fing won’t be able to see them.