Our firewall is an MS ISA server. There is websense in between. The browsers are configured with an automatic configuration script (a .pac file).