What current traffic control tools are used on windows server 2016?

Question

System administration

Hello!
There is a network: 20 Win machines and 10 Linux, 1 server on win2016. It is required to organize a data warehouse, a proxy server physically on one server, access control in accordance with group policy, short-term Internet access sessions.
I'm interested in how flexible the roles and components of win2016 are without installing third-party software. How “appropriate” it is to place a proxy server and data storage physically on the same machine, how reliably it is possible to isolate the storage from the interface that looks into the global network, ideally there should not be Internet access on the server itself.
And most importantly, how to manage Internet access? For example, allow the user1 user group access to the Internet for 4 hours, while being able to track traffic and view history. If it's not really possible to solve this out of the box, please tell us the options that are relevant in our time.
Thank you.

Answer 1

You can put 2008 R2 and roll TMG2010. Ms does not have regular tools such as a corporate firewall.

Answer 2

There was a proxy in Windows . But it hasn't been for sale for many years.
As for "monitoring traffic and watching history" - with the current total distribution of https without bumping, this is almost impossible - either with M$ or without it.