Is it possible to block sites using AD/GPO?

Question

Group Policies

Is it possible to use Windows Server 2008 r2 AD/GPO to block websites to prevent visits from different browsers?
On the Internet they write that in principle it is impossible, but it is possible with crutches.
I heard about the gateway, Squid and NAT, but I'm interested in the possibility by means of GPO.

Answer 1

Through the GPO, you can manage the built-in firewall. But of course, it is better to solve this problem on a border device.

Answer 2

Alternatively, through the policy, you can add sites to the forbidden zone. An example can be viewed here .