Comment by dragoncrab

All the big corps I ever worked for had their devices configured to go through the central VPN and proxy even for browsing.

But I guess blocking $$$ corporate visitors should be fine by you as well.