Webscurity profile

Hi,

I have astaro 120 . we have about 50 users accessing internet without any restrictions. I want to restrict all the users except few.
I have IP range 172.19.1.1 to 172.19.1.254.
I have static IP up to 172.19.1.60. rest for DHCP.

here I want to give full access to 172.19.1.1 to172.19.1.10 users and rest of them must be controlled
I have created 2 profiles VIP host group : 172.19.1.1 to 172.19.1.10 ( full access ) transparent
and rest of them " Common users group " all with limited access including DHCP users.
I have created host definition with all IPs.

here... how to give access to Common users without configuring the browser proxy. ( if i give transparent , are they still controlled )...

since the DHCP users having laptops..sometimes they access internet when they out of office. it will be difficult every time they change browser setting for accessing internet.

please advise me the best way to setup astaro.. according to my requirements..