ZScaler Internet Access will do it with the right blocking configurations (eg, blocking "Advertising" groups). But then you're using ZScaler and that just feel

ZScaler Internet Access will do it with the right blocking configurations (eg, blocking "Advertising" groups). But then you're using ZScaler and that just feels all nice and icky.