A filtering DNS server is much easier to add into your network - don't have to play with proxy autoconfig, and because it's not mucking with the http content, very lightweight.