How can I disconnect users from the Internet?

Question

Computer networks

There is a network ... 25-30 PCs, there is a cisco 2960 switch, there is an ace 5505 firewall, an adsl modem connection, the speed is not so hot in the village, sometimes it is not possible to work as everyone works (they pull all Internet traffic without pity, for all sorts of YouTubes etc. :) so vorols is it possible to somehow disconnect users not from the network, but from the Internet channel in order to free up some speed? and how to do it programmatically?

Answer 1

By means of ASA, this is solved in an elementary way, how to in the internet the sea. Immediately as an option, make a rule from the internal network to the outside and add there only those who are allowed to use the Internet (now, apparently, permit any to any). If not by means of aces, then some proxy. With its help, you can even set a limit on traffic and speed.
Well, if the Internet is not needed at all, then remove the main gateway on the computers - they were correctly advised. It's easy to get around such a "ban".

Answer 2

ax on the cable.

Answer 3

on the ace, set up a rule that denies access to a specific IP
habrahabr.ru/post/81396

Answer 4

So it prevents you from removing the main gateway on computers :)
The key word is the village.

Answer 5

Install pfSense, assign it an ip address of the gateway (then you don’t need to go to anyone), set up traffic restrictions, quotas on it, or completely prohibit browsing the Internet

Answer 6

Zheka on the ASA has a URL filtering functionality. It is possible to prohibit (not) the necessary sites according to the template.