I have check the new Netgate firewall appliance NG-6100 and it seems a much better piece of hardware then they had in the past.
My only questions is: Most of the SPF+ ports seems to be dedicated to the WAN side?
I do hope this is customizable because having 10GbE is rather needed on the LAN side, not the WAN side (although nice to have, if you can afford at 10GBE fiber to your office, you’ll probably have to get a much more powerful firewall to handle the traffic that will need routing and filtering on the LAN). They also offer 4 x 2.5 GbE Ethernet port - a port speed that is not really used among most commercial switch - but PCs now have motherboards with built-in 2.5GbE ports, so why not.