Hardware firewalls that don't require a subscription?
Are there pieces of iron for which you do not need to purchase expensive subscriptions and at the same time retain the functionality of the web filter, IPS, etc.?
I suggest OPNsense, install updatable blocklists ( iplists.firehol.org/?ipset=firehol_webserver ). How to do this is on the OPNsense forum. IPS and IDS are there, but when IDS is running, there may be latency spikes