I may be off base, or missing the point, but i have setup sophos UTM 9 within my proxmox server using a KVM it is free if just using basic functionality which is all i/u would need. You could use PFsense like this, but being BSD it does not support virtio devices, yet so i went with UTM 9 as it...