Blacklisting (or whitelisting) is done via Access Policy within a Smart Flow. Navigate to Application—>Settings—>Services. Click the pencil icon for the Smart Flow to Edit it and enable “Access” in it. You can add a rule to “Deny” specific IP address or network.