To block direct web access for your network(s) and force people to use proxies, you should add the following access list to your router LAN port (inbound).Here is a sample cisco router configuration: router#configure terminal router(config)#access-list 100 permit tcp any host 192.189.54.60 eq www router(config)#access-list 100 deny tcp any any eq www router(config)#access-list 100 ...