Evaluating HTTP Security Solutions

While trying to eval a HTTP security solution I’ve been trolling for viruses by browsing Google Top Trends.
The vender advertizeing their zero day protection detects the virus even when virustotal has only one scanner detecting (and not one used by this vender). So they are showing off their zero day protection rather well. The problem I have is the incumbent protection which would not have detected the virus with AV was able to block the site completely with URL filtering.
I normally don’t think too much of URL filtering as protection anymore. Malware can be on legitimate sites. New sites that aren’t catagorized come online. But for my extremely small sample set, its actually providing the same level of protection.