If you want to protect your organization from ransomware, maybe you can have a different approach
Have you considered using cloud delivered Security as a Service?
For example, you can have a subscription to integrated cloud services that may deliver the desired results…
If you intend to use a cloud based firewall you may want to get a deep dive into virtualization technology for all the available vendors. Then decide which features versus ease of use you need. Also, if it is no only firewalling but security as a service, you might go deep…