If you have a hardware firewall, is that good enough?