No we don't use a proxy server. We are just using Checkpoint firewall where it goes out from one external IP and we can see all the reports too. All these users are not enabled on the firewall otherwise i would have blocked them on the firewall itself.