It seems like Utah could do mostly do this by intercepting all consumer traffic.

Just buy the surveillance equipment from Russia and get it done.

With some sort of whitelist of IP addresses that consumers, travelers, and business executives are allowed to connect to while in the state?

A VPN/proxy could exist at almost any single address at any given time.