Without any UTM on the gateway, this is a crucial question people should ask IMO. Especially since home networks rarely protect from lateral infections or hackers. It's a neglected question.. In my experience, for raw network protection/firewall power, UTM-Like capabilities, you'd better look at;
1) Norton. Norton, as much as it pains me to admit it, has a very robust firewall based on SEP corporate offerings.
2) Eset. Eset has a very powerful firewall, L7 DPI and IPS Rulesets that far outstrip most other offerings.
3) Other contenders - good firewalls - G Data, Kaspersky, Bullguard.
You need to find a balance, but 1, 2 or 3 will provide most people with sufficient network protection. If you are really worried, 1, 2 will provide near absolute UTM-style protection with IPS and protocol blocking/inspection at the granular level.