We have a Web Filter 310 that we just started implementing. It is running in proxy mode and is using Kerberos authentication on our domain (Server 2008 R2 based). So far its been doing us a lot of good for the most part. One snag we've hit though, is that we have some machines that need to access the web via mediums other than a browser. Specifically, a number of users have Adobe creative Suite, which we like to update from time to time. We also have shipping stations in our warehouse that use software which requires web access to FedEx.
The only way I have found to get around this is to add the Adobe and FedEx domains as proxy authentication exemptions. This would be fine, however, we have floor workers that we block everything for except our Ipswitch webmail site. If we ever add anything as a proxy authentication exemption, all other rules are bypassed and they get access to it. We'd like to prevent this accessibility.
We are new at the web filtering game, so we just need a little advice.