Hello, I am interested in learning what is required for name based acl blocking in order to prevent certain websites on the outside from being accessed from the inside.

I have had some luck doing it by IP thus far, but was wondering if anyone could help me accomplish the same task except by name instead of IP. Does this require a policy of some sort?