so, you don't have firewall?
simple setting in firewall that allows only outgoing port 80 on the proxy server forces users to stop using web directly.
_________________________
!

download KiXnet