I would say you need to know whats your existing network infrastructure built on. Only considering Firewall with lots of functionalities rather which is firewall like UTM you can consider Fortinet or Sophos. But if you have a security system like NAC or SANDBOX you need to…