For roaming clients I'd like to have a 3 way toggle with following 3 settings:
  1. Normal filtering (act normally)
  2. Disable filtering (great for troubleshooting)
  3. Block all, with optional custom block message (quarantine a machine, if they try to access any site a custom block message can be displayed to give the user more info or instructions)