I think I solved my problem, by swapping XR500 with XR1000, where X500 will be stand along, for the hybrid VPN, so i can wait for a year. But if you would have beta i can test it:)
XR1000:
I am surprised how well adblocker works for the whole network.
The only issue i found two CPUs would run at 35% average without load, in isolated network, the impression like something running on the background, could it be Netgear Armor? When i enable it, cpu spikes for 30 seconds to 80% (2 out of 3 CPUs) and after it goes back to 35% when i disable it i do not see significant improvement.
How do I remove bits for the NetGear Armor, it is useless for this device, net duma team already implemented application layer features, which support logging, hybrid VPN, adblocker and packet analyzer do we really need black box called Netgear Armor?