what would be best way of restricting web sites

[mujtaba baig]

hello every one 

i want to know which way is better way to restrict the user access from web sites ? 

My main question is here that Is cisco router and acl is the most better way of restricting user access from web sites ?

If it is not which way is the better way ? 

thanks i wish i would get some very useful comments 

[Marvin Rhoads]

The most full-featured ways are to either use:

a. Cisco Cloud Web Security (CWS - available with both routers and ASA firewalls) or

b. the ASA firewall with Application Visibility and Control and Web Security Essentials (AVC and WSE).

Both are licensed features.