There is the ability to block groups from making external calls but no way for the system to block external calls from finding the group. There should be a way to restrict calls into the system, that it will block a call to a group from the PBX.