Does Your Business Need a Managed Firewall?

A Streatham accountancy practice we spoke with had eight staff, a decent broadband line, and no idea what a firewall was — they assumed the internet “just came with one”. It did, technically: the firewall built into their router. Then one afternoon a member of staff clicked a convincing invoice email, a machine started quietly reaching out to a server abroad, and nobody knew until their bank flagged an odd login. The router had done its one job — blocking traffic coming in — but it had no opinion at all about traffic going out, no way to spot the pattern, and no way to tell anyone.

That gap is the whole subject of this guide. Most small offices run on the firewall inside a broadband router and never think about it again. For some businesses that’s genuinely fine. For others it’s a quiet risk they’ve never priced. Here’s how to tell which camp you’re in.

What a basic router firewall actually does

The firewall in a typical broadband router or all-in-one box does one useful thing well: it blocks unsolicited inbound connections. If someone on the internet tries to reach into your network uninvited, the router says no. That’s real protection, and it’s why plugging a laptop straight into a bare modem is a bad idea.

What it generally doesn’t do is look at the content of traffic, understand which sites your staff are visiting, notice when an infected machine starts “phoning home”, or separate one part of your network from another. It’s a gate that checks nobody’s climbing over the wall — but waves everything through the front door because you opened it, including a member of staff downloading something they shouldn’t.

What “managed firewall” adds

A managed firewall is two things: a more capable device (often called a next-generation firewall or UTM), and a person or team keeping it configured, patched and watched. The device part can typically:

• Inspect traffic, not just addresses — spotting known threats hidden inside otherwise-normal-looking connections.
• Filter web and content — blocking malicious or inappropriate sites before a browser ever loads them.
• Watch outbound traffic — flagging the machine that’s suddenly talking to a suspicious server, which is exactly what the accountancy office missed.
• Segment the network — keeping guest Wi-Fi, card machines, cameras and staff computers in separate lanes so a problem in one doesn’t spread to the rest.
• Report and alert — producing logs someone actually reviews, instead of a black box nobody ever opens.

The “managed” half matters as much as the hardware. A firewall is not a fit-and-forget appliance. Its threat intelligence needs updating, its firmware needs security patches, and its logs are worthless if no one reads them. A capable firewall left unmanaged for two years is a false sense of safety with a flashing light. This is why a firewall usually lives inside broader managed IT support and cyber security rather than as a one-off purchase.

When a small business genuinely needs one

You don’t need to spend money to feel modern. Plenty of very small, low-dependency setups are reasonable on a well-configured router. But a managed firewall starts earning its keep when several of these are true:

• You hold client or personal data you’d hate to lose or leak — accounts, health records, legal files, customer databases.
• You have staff who can click the wrong thing — which is all staff, and the more of them there are, the higher the odds.
• Downtime costs you money or trust — if a day offline means lost revenue or awkward client calls.
• You have a mixed network — office Wi-Fi, guest Wi-Fi, a card terminal, cameras, maybe a server — all sharing one flat connection.
• You’re being asked about security — by an insurer, a larger client, or a Cyber Essentials assessment — and can’t currently give a confident answer.
• You run on-premise kit or remote access — anything reachable from outside deserves a firewall that’s actively watched, not just switched on.

If most of that describes a business rather than a hobby, the router firewall is probably doing less than you assumed.

A quick checklist before you decide

Run through these honestly. They’ll tell you more than any sales pitch:

1. Can you name what protects your network today? If the answer is “the router the broadband company sent”, that’s your baseline — and its limits are above.
2. Does anyone review anything? Nobody looking at logs or alerts means problems get found by your bank, not by you.
3. Is the firmware up to date? Consumer routers stop getting security updates surprisingly fast. An unpatched box is a way in.
4. Is guest Wi-Fi separate from your work systems? If a visitor’s phone shares a network with your accounts machine, that’s a Wi-Fi and network design issue worth fixing.
5. What happens the day a machine gets infected? If the honest answer is “we wouldn’t know”, that’s the strongest argument for managed protection there is.

None of this needs to be frightening or expensive. For a small office, the right answer is often a sensibly-sized firewall, properly set up and quietly looked after — not enterprise kit you’ll never use.

If you’re not sure where your business sits, we’re happy to take a look at what you’ve got and tell you straight whether your current setup is enough or whether a managed firewall would genuinely earn its place. No jargon, no scare tactics — just a clear read on your actual risk. You can get in touch whenever it suits.