Hello
I would strongly reccoment on premise solution. If you are looking for advanced web security includint application and content filtering and also reporting functions consider Forcepoint, if you are sattisfied wirth standard UTM solution consider Fortigate