We paint some broad strokes to block malware, pornography, and ads, but that's about it. If you get much beyond that in a professional environment, you're really talking more about an HR problem than a technical one. You're also going to run into a lot of false positives where you're blocking legitimate content.
If you visit https://www.google.com/safesearch from a company network, you can confirm that we enforce Google's SafeSearch (and we block Bing and YouTube as well).
In addition, all devices on company networks are configured to use CloudFlare's Family Filter (see https://blog.cloudflare.com/introducing-1-1-1-1-for-families/ for more info).
That covers most malware and pornography, but ads are also a pain, slow down sites, and consume bandwidth. To that end, we deploy uBlock Origin Lite on Pinnacle-managed web browsers.
Even taking a fairly conservative approach to filtering, we still occasionally run into false positives - you can request sites be unblocked by emailing us - techsupport@pinnacletechnology.solutions. You may also want to see Disabling uBlock Origin on a particular site or link