As I looked at the network diagram I found it odd that the server was Internet facing and not behind a firewall or router.
As zx10guy said, the best solution would be to purchase a firewall to face the Internet or just place the router in front of the server.
-----------------------------------------------
As for controlling Internet access to the users, depending on what operating system is installed on the server, you can do so through Group Policy on Windows Server operating systems.
Beyond that, some routers will allow you to filter Internet access although it will apply to all users. Or you can have the users use regular Windows accounts, create an administrator account on each computer, and filter the Internet access per computer.
Those suggestions being listed from most recommended to least recommended. :)
As zx10guy said, the best solution would be to purchase a firewall to face the Internet or just place the router in front of the server.
-----------------------------------------------
As for controlling Internet access to the users, depending on what operating system is installed on the server, you can do so through Group Policy on Windows Server operating systems.
Beyond that, some routers will allow you to filter Internet access although it will apply to all users. Or you can have the users use regular Windows accounts, create an administrator account on each computer, and filter the Internet access per computer.
Those suggestions being listed from most recommended to least recommended. :)