These recommendations are for reference only and can be adjusted for a specific situation.

1. First of all make sure to add school rule set to all students.
2. Redirect to http://search.skydns.ru of those search engines which does not have automatic safe-search or use existing «School rule set (search-engines)»
3. Configure https-filtration or restrict port 443 on the firewall.