said by patcat88 :

Ban all protocols except permitted ones. Packet filter the permitted ones. All encryption keys must be filed with the govt in key escrow, so network filters can look inside all data. If its encrypted and can't be identified (because key isnt in govt database), packet is dropped and reported to govt as subversion of the law.