If you are not currently using Fortinet, ask your Fortinet partner for a CTAP - "Cyber Threat Assessment" It takes a couple of weeks and gives a useful (if somewhat marketing-focussed) report that identifies what is going on with your network now, and helps identify answers…

Fortinet is a good option, the interesting thing with them is all the other bits you can add. Many of these such as email protection, Sandbox, edge device protection (anti-virus, VPN Connector for PCs), tokens (electronic or hardware), switches, Wireless Access Points all…