Preventing access of a network facility in response to an operation

Methods, systems, apparatuses and program products are disclosed for context sensitive selective control of usage of connection(s) to telecommunications networks, especially Internet and the like. Provision is made for allowing certain resource(s) to exploit Internet while disallowing other resource(s) from doing the same, and making the implementation hardened against attack or compromise. An exemplary implementation is to allow anti-malware products to update over Internet while preventing malware from interfering or using the same communications resource simultaneously. Previously developed implementations have shortcoming that are overcome by the present invention.