Or just buy decent equipment to avoid disappointments. This isn't a personal attack on anymone, a USG/Edgerouter might be perfect for some use case, doesn't mean its perfect for everyone. If you want a no compromises all the way to the end firewall your best option is a PFsense box or something decent from Cisco, Dell or the like. Fact is the USG isn't as great as many people on this forum make it out to be, nor is any Mikrotik (I know someone is going to call me out for being bias so lets settle it now). IF you want simple to set up and manage, USG is probably the closest option. IF you want more power, Mikrotik or an EdgeRouter. If you are done playing in this small pond Cisco is where the serious networking happens.I wouldn't count on CLI with USG, it is problematic. If you have to use CLI, you should better chose one of EgdeRouter instead to avoid disappointments.