Good info. How do you think PFsense compares to Fortinet or sonicwall? Personally I found certain competitors a little more cumbersome.

Yes you can use Squid and SquidGuard to act as your web/content filter. We have it running and are able to filter out HTTP and HTTPS. As far as App Filtering, you can setup Snort to filter out applications. See Netgate's blog for more information…