If affordability and lack of resources are getting in the way of providing adequate web security for your organization, don't just throw your hands up in the air, you might want to consider a SaaS based web security service. For all of the reasons that SaaS has been embraced in the enterprise applications space, web security as a service is offering similar cost and management benefits for organizations struggling with the economics of web security.
Web security in the cloud may not be for everyone, so test it carefully in your environment to see if it's the right fit both economically and technically. Many of the biggest players in the web security space are already offering, or are close to offering, their technology in a subscription based model. So if you can't afford a Bluecoat, a Websense or a Finjan box this year, then perhaps you can find a SaaS Web Security vendor that offers that technology as a service now for short dollars periodically instead of all at once.
Are you using a SaaS web security vendor now? Share your experience with me, and our readers. I'm particularly interested in hear about what sort of additional internet latency you've realized as a result of shipping all of your outbound web traffic to a 3rd party.