Comment We ran for yearswith no firewall - and no problems (Score 1) 348
We ran a Windows server for many years with no firewall. We took credit card info (which was immediately encrypted). We had spent over a month hardening the server by shutting down all but the services that we truly needed. We never had a problem with that arrangement. We added a firewall when PCI required it but I'm still not convinced that it mattered.