Did you implement web filtering at the infrastructure level? If so, would the BES not be behind the filter? If it's excluded, is there any way to remove that exclusion? That would take care of it without implementing the access controls and without the additional overhead invovled with keeping up with yet another list.

__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.