You can definitely do that with ACLs. Depending on your network & users, we normally recommend a product called Packeteer, which is a Layer-7 bandwidth mgmt appliance.
It allows you to stop/block or limit bandwidth for web appls & sites. You can set policies, allow/disallow/limit, etc globally, per group or even per IP. You can also set date/time restrictions.
The box is most often used for these main functions:
- stop messaging and other peer-peer traffic
- limit bandwidth for non-critical apps (eg streaming media, non-specific surfing)
- reserve bandwidth for critical apps
- provide QoS of VoIP
- reporting & auditing of network use
It's a little bit more controlled way to do it- this specific device has a pre-definted list of application signatures (layer 7) so it catches apps that morph and port-hop. When you set it up, it automatically identifies & classifies all your WAN traffic and puts it in an easy to read format.
jj