This is one of three main reasons we went with Meraki at our church.
Blocking is ridiculously simple. For our guest WiFi:
and:
Those get everything we need, really. On the Office network:
We could do more, but the general idea is to not make it feel like Big Brother is in there. Rather, we help make staff feel safe.
I understand licencing costs are a concern, but our MX84 has made what used to be complicated and patchy, at best, into a robust and generally sure thing. We don’t have any full time IT staff at my church- I voluntarily manage this and other things. Also, being a Meraki partner, I was able to get the equipment and licenses discounted. Find a partner that’s willing to work with you for pricing. Tell them you’re a church and see if they’ll give it to you at cost.
We moved from a SonicWALL that worked fine, and had a paid content filter component that seemed to work okay. Had endless issues with the wireless though.