A system for controlling network content to be accessed by a client, the system, comprising: the client, being operable to make a network access request to a resource in a network 12); the client being operable to access a network access server in the network to set up a network access profile by selecting from the available network access options, the available network access options including at least one of: anti malware options; communications options to avoid; file types and protocols to avoid; email addresses to avoid; websites to avoid; and type of email not to receive; the client being operable to access at least one trusted network site in the network to set up at least one trusted site profile, stored on the trusted network site, by selecting from the available trusted site options, the available trusted site options including at least one of: the identity of network resource identifiers it is permitted to access; IP ports it is permitted to access; type of content it is permitted to access; time of day it is permitted to access; the identity of network resource identifiers it is forbidden to access; IP ports it is forbidden to access; type of content it is forbidden to access; and time of day when it is forbidden to access, the trusted network site and the network access server being in communication with each other; the client being operable to pass the network access request to the network access server; the network access server comprising a combining engine operable, upon receipt of the network access request, to combine the network access profile with the at least one trusted site profile to form a combined profile; the network access server also comprising a filtering engine operable to test the network access request and to allow access to the resource through the authorisation of the network access server only if the combined profile is not violated and the network access server 14 also comprising a client memory, wherein the network access profile is stored in the client memory. the client, being operable to make a network access request to a resource in a network 12); the client being operable to access a network access server in the network to set up a network access profile by selecting from the available network access options, the available network access options including at least one of: anti malware options; communications options to avoid; file types and protocols to avoid; email addresses to avoid; websites to avoid; and type of email not to receive; anti malware options; communications options to avoid; file types and protocols to avoid; email addresses to avoid; websites to avoid; and type of email not to receive; the client being operable to access at least one trusted network site in the network to set up at least one trusted site profile, stored on the trusted network site, by selecting from the available trusted site options, the available trusted site options including at least one of: the identity of network resource identifiers it is permitted to access; IP ports it is permitted to access; type of content it is permitted to access; time of day it is permitted to access; the identity of network resource identifiers it is forbidden to access; IP ports it is forbidden to access; type of content it is forbidden to access; and time of day when it is forbidden to access, the identity of network resource identifiers it is permitted to access; IP ports it is permitted to access; type of content it is permitted to access; time of day it is permitted to access; the identity of network resource identifiers it is forbidden to access; IP ports it is forbidden to access; type of content it is forbidden to access; and time of day when it is forbidden to access, the trusted network site and the network access server being in communication with each other; the client being operable to pass the network access request to the network access server; the network access server comprising a combining engine operable, upon receipt of the network access request, to combine the network access profile with the at least one trusted site profile to form a combined profile; the network access server also comprising a filtering engine operable to test the network access request and to allow access to the resource through the authorisation of the network access server only if the combined profile is not violated and the network access server 14 also comprising a client memory, wherein the network access profile is stored in the client memory.