Firewalls used to limit internet access

I would like to limit the websites that my users go to. Also, once the users are in the www, what can I use to keep them from going from approved sites to unaproved sites?