Best is symantec endpoint portection -- it's a complete solution . Plus it does not take much resources.