
Untangle is Freemium the advanced features cost $ FreeBsd is supposed to work with any board that support U-Boot, Pine Rock64 is the only SBC I know of that qualifies. OpnSense does not require AES-NI hardware, IpFire can run on Raspberry Pi 3 (not fast) or other ARM hardware. These boxes come pre-installed with PfSense firewall but the beauty of open source is you can run whatever fits your needs. Apparently a popular choice, out of stock for a while. May have free conventional Sata, 1x M.2 and 2x PCIe sockets. 3x Gbe, 2x cpu, 2Gb ram, 30Gb Ssd if you need to store logs. Pfsense also sells the PcEngine APU2 (branded Netgate) $378us. 6x Gbe, 2x Arm Cpu cores, 2Gb Ram, 8Gb Ssd, pfsense pre-installed, 1x USB3

Pfsense does sell official hardware the Netgate SG-3100 (1000 series is not recommended) $350us. NewEgg has Protectli hardware $250ca, fanless, 4x Gig eth ports, 0 Ram, 0 HDD.
