All firewalls today do SPI, but few do for UDP, most do psuedo, CHX is one that does SPI on UDP as well. Similarly, majority of the routers today do SPI for inbound.