You can't surf the Internet without asking for help.
The company has a win2012 domain server. The company plans to control the Internet without adding domains. Firewalls such as isa,tmg cannot be used above 2012. Do the bosses have any suggestions without spending money on equipment?