I worked with the firewall "Nobero" which is paid and bit expensive.
It is a complete Network Firewall including groups policy, banning URLs and social sites.
But It has a feature of tracking users' keystrokes and mouse clicks (which is captured by the desktop client of the same firewall)
It captures all the keys including everything if he/she uses facebook, gmail, or other personal sites. It captures everything and an administrator can see them.
My question is whether it is legal to capture keystrokes and mouse clicks without notifying the user