3 ms·You'd want the firewall configured with default deny, but there's no need to keep the NAT.by ownagefool 7y agoYou'd want the firewall configured with default deny, but there's no need to keep the NAT.