Set default firewall rules. Enterprise devices that presuppose the administrator can do it's work, do not have any rule.
(7.18 is ok, is not changed on subsequent versions)
For sure if you do not do correctly the firewall, you face also other problems...