@BrechtSchamp I do like the Traffic Analyse breakdown, unfortunately with the way content is hosted it's difficult to track down what coming from where. Even then because it's hosted you can't really block it because you never know what content is hosted there you might need. I believe in this case it would be more effective to see more data on the traffic itself to determine how it's going passed the content filters.    I would also look at Blocking Portals because that will allow some content to bypass other filters. We had blocked external E-mail, but if you logged into Google from www.google.com you could then use the apps option and access it. Added Portals and it was inaccessible. It may be working along those lines I surmise. If it catch legit traffic you can then white list it.   Another option is AD Integration so you can crank up the restrictions based on User's. All dependant on your setup though. ... View more