We are using Sophos enterprise for the antivirus and web control (I got an excellent deal for sophos enterprise for 3 years), Netsupport DNA is used for the safeguarding and has other useful features like print monitoring, and finally we have pfsense for the firewall. Regarding Sophos UTM and Sophos XG I have setup and used both of them and they are very good and user friendly, however, initial costs can be very expensive so the setup we have it worked out cheap and does the job.