Domains whitelist few - blacklist the rest

Hello,

Is any elegant solution to restrict users access to only 2 (http and https) domains like *.abc.com and *.xyz.net and block all the other requests without using 3rd party tools ?

Right now I’m using Microsoft Family Safety to achieve this but with any new user who join the corporation it becomes harder and harder .
Using hosts file on windows, mapping domains to ip, blocking / allowing ip addresses on Mikrotik firewall is not a solution as I don’t have access to the entire ip classes used by *.xyz.net . I tested blocking internet content using Mikrotik firewall but it seems to not work for https addresses .
Also Internet Explorer content blocking is not a perfect solution .

If you can provide me 2 approaches to my problem I will be very glad .
Thank you for your time !

You can do with transparent proxy and access list.
Firt create proxy transparent in nat firewall and then add to rule for accept your whitelist web site and other for block anything


Send from my mobile phone using Tapatalk.