1.
Define the network port classes
in

Figure 1
2. Set the network policy (Advanced PolicyàNetwork) e.g. Block the web port during office hour, give warning to user and alert message to system administrator (see Figure 2)

Figure 2
3. When user tries to browse internet during office hours, the policy will be applied immediately and block the user action (see Figure 3)

Figure 3