I want to block my network users to access most of the external websites. Some users may need access to Facebook (like the users from marketing department), while others may need access to banks websites.
What I want to do is to control the access of these users, allowing them to access only the necessary websites.
To do that, I've been thinking about using a Captive Portal to control authentication (so I'll know 'who' is requesting the website). Also, I'll need a proxy to deny access to the blocked websites.
Doing some research I've not found any single software capable of doing both tasks. I tried PacketFence and Squid. The first handled very well the authentication steps. The other, the URL blocking. But could not make both talk nor do the desired job.
Anyone have ever implemented something like this? Is it possible with any of these softwares?
It is very important that the users are authenticated against an Active Directory server.