Id add that https://vyos.io/ is another open source alternative Firewall OS that implements the cisco configuration language, if that's your thing.

I tend to prefer Linux firewalls over BSD based, but that's generally a preference in features over simplicity.

A hypervisor lets you try them all with as minimal effort in swapping them out.