I've been in / out of this situation for several years myself. The best bang for the buck came from CheckPoint. And I tested a lot of solutions - particularly...