Working on a Draytek 2830

The plan that has been set to me is,

Setting up http and https blocks against social media sites such as facebook, twitter etc.

Setting up SSID 1 as Employees and SSID 2 as Guest.

Now, they want me to allow SSID 1 Employees to access media sites but anyone that uses SSID 2 Guest account will have this blocked by default.

Is there away of being able to set this up ? and if so how do I go about doing this ?

Any help appreciated.

Thanks