Websense is probably tops. There is an open source (free) product called Untangle that incorporates access restrictions as well as serves as a second-level firewall.
Get demos from both, compare features and cost (especially how easy is it for you to administer), and choose. Both Barracuda and Websense will let you do an onsite eval of their products if you ask. Barracuda makes it really easy to ask.