Firewall

pfSense. When you find a valid reason to replace it AND have time to manage it in the future (without time limit) and implement reconfiguration requests on short notice, replace it with whatever you want.