Go to Web Security > Policies.

Click the + icon in the top right.
​
​

Select the Action as Block.
​

Select Secure as Domains.

For Apply To, select either Everyone, or select users and/or groups.

On the Domains line, enter one or more domains to block, separated by commas. For example: google.com, facebook.com

Configure desired Feedback Settings.

Click Create.
​
​