Does Access Control block OUTGOING or INCOMING connections?

Orbi WiFi routers do not have this capability.

By default, any device on the LAN can initiate connections to any location on the internet. Once the connection is active, then responses can pass through the router to the device that opened the connection.  There is a setting call Block Services which can be used to prevent specific devices on the LAN from opening specific types of outgoing connections (or block every type of connection).  

No device on the internet can initiate connections to the LAN unless the system has been set to forward specific ports to specific devices on the LAN.

What it sounds like you are asking for is the ability to block internet addresses (or block every internet address except designated addresses) from responding.

i.e. even if a user opens a web browser and tries to open a web page at (name the site), the system will block the connection to that site unless it is "on the list".

Perhaps I have misunderstood the question.