You will want to employ DPI anyway, to make sure no other apps/devices on your network subvert your internal security. DoH is just another signature to detect a

You will want to employ DPI anyway, to make sure no other apps/devices on your network subvert your internal security. DoH is just another signature to detect and block.