Although I am not sure of the method, I know there is a way to turn off all external access to websites, and then have a table of sites that ARE allowed. I tried to get them to do that at my company, but they said it would be too much overhead and easier to give everyone full access to everything. Then they complain when folks are surfing!!