Email filtering solution

HI, I'm helping someone evaluate mail filtering systems and my background is with the Barracuda Email Security Gateway. It does just about everything the customer wants except it is not in the cloud(!). So we are looking at other solutions.

Key differentiators:

• End-User Quarantine system for spam release/whitelist
• AD-integration, current environment is Office365 Hybrid
• Ability to enable license features by AD user or AD group (we do not want to license all mailboxes, only groups of users).

Can someone give me some guidance on the Symantect offerings? Is there a good document to help me find the answers?

Thanks for any advice!