Hello I would strongly reccoment on premise solution. If you are looking for advanced web security includint application and content filtering and also reporting functions consider Forcepoint, if you are sattisfied wirth standard UTM solution consider Fortigate

I will recommend go with Fortinet , Checkpoint or Palo Alto solutions depending on the need and capacity