If you have to begin with it and want to save good money I would recommend you to investigate SQUID proxy wich is a Linux solution. I'm using ISA because the enterprise policy, but I would use proxy+iptables+webmin if i was allowed to....