How to block access to all sites except certain ones?

Question

Active Directory

There are computers in AD, under Windows 8, the gateway is a regular asus RT-N66U router.
It is required to close access to all sites, except for a certain allowed list of sites! How can it be implemented?

Answer 1

We need a proxy server, where it will be possible to wrap all http\https traffic from a PC and make white\black lists already in the proxy.

Answer 2

In the control panel of the router: Additional settings - Firewall - URL Filter. Set up a white list (white list) in which you specify allowed links.
AD under windows 8? What is it like?

Answer 3

remove redirect requests in the DNS server settings. Register the necessary sites in hosts and distribute what through GPO

Answer 4

If the network is large, then TMG, if not large, install a separate Linux gateway and pick the firewall there.