Firewall rule for blocking all websites and allowing few

Dear All,

I know this is a topic discussed multiple times but i have followed all the procedures mentioned. Added Application: Internet explorer,chrome etc to application part of the rule, mentioned *.* under DNS domain and under service http: port 80,443 despite all this the user is still able to browse sites.

Symantec Client and Manager is 12.1 . When i had 11x version for SEPM and client i had successfully blocked but now after upgrading to 12.1 unable to effectively block browsing.

Thanks in advance for assistance.

Regards Biju