My friend ask me question today, since I'm new to security stuff I would like to get your opinions..

Question consists of 3 parts:

1) Only one department(i.e sales department) can access facebook, others can not access it.

2) While accessing gmail, blocking other google services like youtube or maps service.

3) Checking HTTPS traffic without any certificate installation.

The network will be mid-size network

Which product should you suggest for this scenario, also i would like to hear why you suggest them.

Thank you!