How much budget do you have? As it's only the one person involved, I'm guessing you're looking to do this as cheaply as possible (or free of charge) ...?
You can do this with Microsoft's ISA Server, or with Cisco Security Agent, but both of these are extremely expensive and are massively overkill if you've only got one person abusing their web access. Having a word in their ear would be a cheaper option
