Have a firewall set up with Filtered HTTP traffic - if you're IP is not in the list, you don't get through on that port. Proxy servers are set up with internal interface of firewall as default gateway. All users on network minus IT professionals are ...