Here's what I have done, I was able to manage to create hotspot user with their own IP addresses and with those IP address, I can block or put some restrictions on those IP addressess or address pool, right now im thinking that its only ideal for small business environments,what if I have to implement hotspot to a large company with 10000 users and I need to divide them into groups with diffrent restrictions, like a group for managers,for ITs, for accountants,for engineers,for hr, etc..can you tell me the best option? thanks in advance

i was able to answer my own question, heres what I did, I created 3 different ip address pools, one for manager,employees and for ITs,created hotspot user profiles with corresponding pool names, then created users assigning the user profiles that I created. So ,after creating all the users, I set up the webproxy using the ip pools as the src-address, and blocked some websites mainly on employees..