Does a transparent proxy normally run on the localhost? You could install the transparent proxy on the machine that connects your network to the internet, only listening on the intranet NIC (perhaps onlyport 80).
It is transparent in the way that nothing needs to be reconfigured on the client side.
I assume it is not so hard to make a transparent proxy this way.