Open Symantec Endpoint Protection Manager

1. Click on Policies button
2. Under view Policies > Select Firewall
3. Edit the existing Firewall Policy
4. Click Rules
5. Right Click Rule Number 2 and Select Add a Blank Rule
6. Right Click Under the Action and Set it to Block
7. Right Click on the Host Select Edit
8. Under Specify host names or addresses of computers that trigger the rule Select : Local /Remote
9. Under Remote Click Add Under Type Select DNS domain
10. Under DNS Domain type the name of the Website e.g. : *.symantec.com
11. Click OK and close the Host List Window
12. Click OK and close the Firewall Policy Window
13. Assign the policy to the desired group

Note : In the same way, if you add *.com in Step 11 it will block the entire range of .com websites
Note : Make sure that all the computers you are managing have Network Threat Protection installed or else the Symantec Endpoint Protection client will not have the ability to block access to websites