fist you can not filter content on it with out BES 10
with BES 10 you can use SSO to track individuals or proxy for all users that would go through your web filter.
I use a Barracuda web filter for my office. They will let you evaluate a unit for free.
https://www.barracuda.com/products/webfilter