We found that as much as you want to control what employees do, people can access infected Web sites. You can avoid this by filtering at the URL level.
Joel Sloss