But AFAIK they can block the whole domain, when you access an https site any proxy or firewall you have can see the domain but nothing more.

For example a firewall would see that you entered Google.com but not what you searched