Most firewall’s have some sort of web filter these days. I have seen numerous companies who do not take advantage of the built in Web Filter. At a minimum you should filter out malware, spyware and malicious web sites. I would also suggest you filter out advertisements as I have seen viruses come from online advertisements. It is built in and typically just a few clicks to configure.