In the past i used a sonicwall and used content filtering to block access. Basically i banned everything and assigned a user logon where people who had a logon and password could bypass content ...