Install a mandatory VPN to your home, then at home setup a gateway to control everything.

Ensure you install a custom certificate from the gateway in the root certificate vault so you can do dpi even in the encrypted transmissions

Filtering is important but logging is even more important. Don’t forget that