As someone that I have worked for years with this kind of products in a couple of F500, I hate them with all of my heart. I really prefer the approach based on

As someone that I have worked for years with this kind of products in a couple of F500, I hate them with all of my heart. I really prefer the approach based on DNS and IP filtering, it's easier to manage and doesn't have all the problems that SSL inspection has.