The Untangle video blocks websites at the gateway. PC software blocks them on the device. Both are real tools — they just guard different territory. This page draws the map honestly.
Before copying any blocking setup, ask one question: where does the block live? The answer decides what is covered, what slips through and how much maintenance you sign up for. This video's method puts the block on the gateway firewall. Here is how that compares with blocking on each PC.
In this video the block lives on the firewall — the one box every device must talk through to reach the internet. When any PC, phone or tablet on the network asks for a website, the request crosses the Web Filter first. That single position is why one rule covers the whole office, including devices you do not manage and guests you do not know.
The same position is also its boundary. The filter sees this network only:
Software installed on a computer (the creator's own Windows tool videos cover that layer) travels with the machine — a filtered laptop stays filtered at home. The price is maintenance: every PC needs the install, the updates and the list, and any user with administrator rights on their own PC can usually remove it. Offices feel this cost at ten PCs; at a hundred it becomes the whole job.
Choose by the job. Office-wide rules, reports and zero per-device work — that is the gateway, and it is what this video builds. One family PC or one travelling laptop — that is a per-device tool's job. Many real setups use both: the gateway as the default net, per-device tools only for the machines that leave.
The complete Web Filter setup on the HR policy — blocking categories, passing a site and reading the block report — is shown on screen in the full video.
▶️ Watch Full VideoFor an office, the gateway usually wins: one setup covers every device on the network, nobody can uninstall it from their PC, and the block reports live in one place. Per-PC blocking still makes sense for laptops that mostly work outside the office.
Yes — if the guest network also routes through the same firewall, its traffic is filtered by whichever policy you assign to it. Many offices give guests a stricter policy than staff.
Yes, and often should be. The gateway is the office-wide safety net; a per-device tool only needs to ride on the few machines that regularly leave the network.