I think the more advanced users will at some point have to rip off the bandaid and move to a router/firewall that allows you more control - ie *sense, unfi, omada, etc. For the first you will need to either get one of the netgate devices or run your own on a white box. There is some learning...