If price is an issue, pfSense (free, runs on most recent intel processors) has intrusion detection.

You can also disconnect your NAS from the external world. I do similar with my Synology Diskstation (linux based, set to update the OS automatically).

When I need to get to files remotely, I use OpenVPN (also built in to pfSense).