I can only recommend the same, OpenBSD + pf is simply perfect. If you manage a couple of firewalls add Ansible and you'll never consider vendor firewall appliances again: https://github.com/liv-io/ansible-roles-bsd/tree/master/open...