best way to block all sites or allow certain sites only

If you use the Fortiguard Web Filtering service, create a custom Local Category (Web Filter > Fortigaurd Web Filter > Local Categories > Create New). Give it a logical name. Next click on the Local ratings tab. hit ' Create New' , add the web site to be added (do this once for each site). Use as little info as possible here to cover more URLs. For example to include ebay, add ' ebay.com' . This will cover www.ebay.com, ebay.com/cgi. . .., and everything else. If you enter ' www.ebay.com' , ebay.com won' t work. Now before you' re done, you have to expand out the ' Local Categories' bullet, and click the check box for the local category you wish to add this entry to. When you' ve added all the sites this policy is allowed to see, add it to the correct protection profile, and you' re done. (In the protection profile, it' s under ' Fortiguard Web Filtering > Category > Local Categorties' ) This is exactly how I allow all entities to get to ' Windows Update' even if not allowed Internet access.

Too easy... thanks for the tip. How do you go about blocking all the other sites? (great example about allowing Windows Updates only) Cheers P