In order to block specific CLIs from being able to reach a PBX extension, you must enable the 'Call Filters & Blocking' Enhanced Service.
Once this is enabled, click the green + button, then enter the CLI you want to block. Select the Destination Type (we usually use Not in Service), then click save. Specified CLI is now blocked.