Normally for security geek changes (changes in firewall, BB´s, IPS/IDS, Real-time Protc, etc) my choices are:
1- Kaspersky IS (a lot, really a lot)
2- G-Data TS (Firewall rules and network type changes, firewall set to max. security)
3- Eset (with a lot of tewaks for firewall,IPS/IDS behaviour, HIPS rules, and machine learning to max)
4- Trend-Micro MS (BB to set hiper, rt protection with all activated, web protection set to max)
If i want security without changes, the choice is:
For network level protection like ioT protection:
Router with firewall and ips/ids system with ip filetring, anomaly detection and database based on Cisco firewalls for entreprise nevel; TrendMicro for smb/consumer level.