Web Filtering Specific Group of Users

Hi, firth time here, hope you can help...

I've a UTM 9 650, all working well and relatively new to us, about 6 weeks old.

We have several retail stores and offices that all go via this appliance. I'm currently using the Web Filtering facility to restrict web sites for these locations, all good so far.

However, I've got certain groups of people who work remotely (via VPN) or in the various stores that more open access to the internet.

So I thought, let's create a separate web filtering policy just for those individuals and apply that policy to their AD credentials. But it seems that's possible, is that correct or am I missing something?

Hope someone can help or advise of how this can be done.

Thanks,

G