This article takes you through the steps needed to restrict your LAN clients' internet browsing to sites that you explicitly allow. To do this:

1. Open Gatekeeper on the WinGate server.
2. Double click the WWW Proxy Server from the Service tab.
3. Open the Policies tab.
4. Select Default Rights (System Policies) are ignored,
5. Click Add.
6. In the Properties for new recipient dialogue select the Recipient tab and select the Users/groups to whom this policy will apply.
7. Select the Advanced tab and choose Specify which requests this recipient has rights for
8. Click Add filter,Add criterion.
9. Choose This criterion is met if
10. HTTP URL
11. contains
12. wingate
13. Ok your way out.

This has created a policy that allows access ONLY to any URL that contains WinGate. If you wish to explicitly allow access to more sites repeat steps 7-12. We could have specified a complete URL, eg http://www.wingate.com but this is more restrictive.