Sorry, I can't recall what my son runs on all of our gear but it's rather complex because we have a rack mount server, big twin CPU unit which runs pfSense operating system (my son just informed me what it is because I always forget) that all of our gear connects through.
pfSense is what he runs, I don't understand it. This is not software you run on any singular device and quite complex.
I do know Kaspersky anti-virus has a good firewall included.
HOWEVER, many of the anti virus programs offer a firewall feature worth looking into.
I thought your lock-up issue was software based not an attack?
You could have a look here:
https://www.lifewire.com/free-firewall-programs-4129270