@geffrey I'm no expert, but the best way is to use a VPN. It is the only way to guarantee no one can see what you're sending and receiving.
For example, ISPs can intercept connections even if you're using HTTPS. I've caught my ISP doing that a lot of times. But they can't do anything if I'm using a VPN. (While the intention of the ISP is good, and because they were forced by the government, it still is not something I personally would tolerate.)
IF, the network in your work is blocking a lot of ports, there is still a way… your VPN needs to support #OpenVPN TCP, you can then bypass most setups. If they're good… then, probably no luck in using a VPN.
Maybe using DoH (DNS-over-HTTPS) or DoT (DNS-over-TLS) can help minimise it. But, there's no guarantee on that. The example I mentioned above, I was completely behind DoH and my ISP can still intercept and scan. ;)