Secure sites, https urls aren't monitored by web shield as they are 'secure, encrypted' and physically can't scan this traffic but it shouldn't block that.
What is your friend's firewall ?
How does your friend access these secure sites, do they access a normal http, www web page and enter their user name and password and then they are re-directed to the secure https web page ?
If so it may be a privacy issue in the firewall if the have such a feature as this has previously been seen in Zone Alarm pro with Privacy set to high. In ZA Pro's case the web shield proxy needs to be manually set or the privacy setting lowered or disabled.
You could pause the web shield to see if access is gained or temporarily disable the firewall (just for this test) and try to access the pages.