Which Enterprise/Personal firewall has the function of logging processes (besides traffic)?

Question

firewall

There is a typical company. Active directory. Everyone uses the Internet.
Purpose: to know which applications on user machines go where.
(and allow/deny traffic not only at the username level in AD, but at the process level)
I.e. at the end of the day, have a report like:
a.ivanov - smth.dll - 10.0.0.1:1024 -> 11.1.1.1:80
k.berestov - dangerous.exe - 10.0.0.2:1024 ->
11.1.1.1:25 does this fit? (maybe something like DLP systems?)

Answer 1

ASA 550*-X seems to be able to. Truth with HELL is on friendly terms not super.
The checkpoint should be able to. The truth is upbeat.