Check out Fortigate product. FortiNet offers documentation on setup of their firewalls for PCI DSS compliance:
https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-compliance/PCI-DSS.htm?Highlight=PCI
They office a subscription service whereby they manage patches/updates for their firewalls as well as monitoring (specifically, Logging, to me it really isn't monitoring) in order to match the "managed firewall" checkbox. Now, I only have a little experience with Fortigate's as we just installed one in our data center as we have a customer requesting us to be compliant (for no apparent reason other than they want us to be, we do not store credit card data and do any processing via https web site)