The problem is that the surfing is occurring while there is work to be done. In this case, the user involved does not have to do anything work related outside the office and work emails are only available to him in the office. The decision really comes from the principle of the company, but in all fairness, is a full day of work really too much to ask?