tbf it's SP3 patched, has the Windows Firewall, and it's running on my Mac so goes through that firewall, and my UniFi network firewall