ASKER
Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.
TRUSTED BY
to block a workstation from internet access you need to create an address object under network and either use the ip (should be static if using ip) or the mac address of the workstations
then add rule in firewall section from lan to wan, set to deny, service is any, source is your address object name that you created, destination is wan ip, select schedule that you want based on drop down choices
that should do it