You're thinking of, e.g. Bluecoat. Certainly everyone runs something like a Bluecoat. But I can't name a client that uses the feature where your end users install the Bluecoat cert so they can scrub SSL traffic. They just use IP and DNS blacklists, like you.