You need to block specific substrings of a URL (e.g., youtube.com/watch?v=... but not the homepage). You need a free solution for a tiny office.
Once you configure the policy groups, it runs silently. I spend maybe 15 minutes a week looking at the "Investigations" dashboard to see what was blocked. The reporting is clean enough to show auditors without heavy editing. umbrella content filtering
We previously used a major antivirus vendor's web filter. Umbrella blocks malicious domains (malware, phishing, C2 callbacks) noticeably faster. It blocks newly registered domains (NRDs) that often host zero-day attacks before signature updates even exist. You need to block specific substrings of a URL (e