Take a look at a new Cloud based service from Check Point: https://capsule.checkpoint.com/ Works very well with existing premise based security gateways from any vendor. You may not need to upgrade your FW at all