Parental controls shouldn't just exist on your network hardware, you should also lock down their devices. Computers should have administrator accounts and children should be using resricted accounts...