These recommendations are for reference only and can be adjusted for a specific situation.
First of all make sure to add school rule set to all students.
Redirect to http://search.skydns.ru of those search engines which does not have automatic safe-search or use existing «School rule set (search-engines)»
Configure https-filtration or restrict port 443 on the firewall.