Hi, I don't have any experience on that but i've been testing in small scale enviroment Dansguardian and it seems to be a good solution. It's CPU consuming though.

Hope it helps you!