I have a client who needs to have a device to block access to all web sites apart from the ones he authorises. He needs to also have VPN capability, so I guess my questions are: 1. Can this be done? 2. What device would be the easiest to use?