WatchGuard - great firewall choice!

WatchGuard Network Security is used by our organization to secure the network perimeter. It's also used as a Zero Trust tool to limit both internal and external access to required resources by using ACLs, policies, etc.
It's used by our entire organization, and we use the full suite of next generation security, including Intrusion Prevention, Gateway and Intelligent AV, Data Loss Prevention (compliance for PCI & HIPAA), Threat Detection and Response, Web-blocker/content filter, etc.

We are a WatchGuard Network Security partner. Two years ago we re-evaluated some of the major options out there for the SMB space, including Cisco, Meraki, Sophos, Fortinet, Juniper, WatchGuard, and others. 9 out of 10 times users would prefer WatchGuard for its simplicity of configuration, performance, and features.

We have been extremely happy with our choice in using this for our own organization, as well as recommending it and implementing with our customers.

WatchGuard Network Security comes in 3 major flavors. Standard Support, which provides for basic firewall features and firmware updates, Basic Security, which includes IPS, Web-blocker/content inspection, Gateway AV, and the Total Security, which includes Threat Detection, Intelligent AV, DLP, and other features. We would always recommend Total Security, but Basic Security is our standard starting point. The Standard Support is really only beneficial for support/warranty, but if you are looking for any kind of "above-and-beyond" features, Basic Security is the package to start with.