We implemented the IPS solution and the DNS sinkhole blocking. 

We use it to upload, delete, and list what to publish on the net to block websites and even posts.

Recently, I blocked Adobe Acrobat Reader. When you install it on your PC, sometimes it contacts the internet and opens some posts. Thus, it can be easily hacked by a user on the internet. When you browse for this kind of list, you can easily upload it on Palo Alto without any difficulty.

We are in financial environment so we put it on premises and in the cloud.