[OT] pfSense hardware recommendations?

Hi All,

I've got a budget for a pfSense firewall to replace our aging OpenWRT box (which works surprisingly well for a consumer unit, but it's getting old and low on RAM).

Does anyone have any recommendations? Rack mount is available but I'm not too bothered. Our dev team is about 15 people.

I need a basic firewall with NAT, the odd bit of port forwarding (we don't host anything) and OpenVPN for maybe 5 clients. WIFI is not needed.

WAN is 100 Mbps up/down. I don't need a router for the LAN side.

I'm unsure what my best option would be. Some kind of ARM box or a cheap rack mounted server (needs to be FreeBSD compatible of course).

-- Paul