If you run a small business with computers, a Wi-Fi network and an internet connection, you already have a network worth protecting. A firewall is the first line of defence for that network — and one of the simplest security tools to understand. Yet many small businesses either do not have one properly set up or do not know whether they do. This guide explains what a firewall is, what it does, and what a small business should actually do about it.

What a Firewall Actually Does

A firewall is a barrier between your private network and the rest of the internet. It inspects the traffic trying to enter or leave your network and blocks anything that does not follow the rules you set. Think of it as a security guard at the door of your office: it checks who is coming in, turns away visitors who should not be there, and keeps a record of what happened.

Without a firewall, every device on your network is directly exposed to the internet. Automated scans constantly probe for open doors — unprotected services, weak passwords, outdated software — and they do not care whether the target is a large company or a small shop. A firewall does not make you invisible, but it closes the doors you are not using, which removes most of the easy opportunities.

Hardware vs Software Firewalls

There are two main kinds of firewall, and most small businesses end up using both.

Hardware firewalls

A hardware firewall is a physical device — often built into your router — that sits between your network and the internet. It protects every device connected to the network at once: computers, phones, printers, cameras. Most modern business routers include a basic firewall, and many internet providers supply a router with one built in. It is usually already on, but it is worth checking rather than assuming.

Software firewalls

A software firewall runs on an individual computer, such as the one built into Windows or macOS. It controls which applications on that machine can send or receive data. It protects the device even when it leaves the office — on a home network, a hotel Wi-Fi, or a mobile hotspot — which a hardware firewall cannot do. Both layers matter: the hardware firewall guards the network, the software firewall guards the device.

What a Small Business Actually Needs

You do not need enterprise equipment to be reasonably safe. For most small businesses, the right setup is:

• A router with its firewall enabled — the one from your internet provider or a small business router. Check that the firewall feature is turned on.
• The built-in firewall on every computer — Windows Defender Firewall or the macOS firewall, both switched on and left on.
• A strong admin password on the router — change the default password the day the router is installed, because default passwords are widely known.
• Separate Wi-Fi for guests — if customers use your Wi-Fi, give them a guest network that cannot reach your business computers or printers.
• Regular updates — routers and computers both receive security updates. Apply them; an unpatched firewall is a weak one.

Simple Steps to Set One Up

If you are not sure whether your business is protected, work through these steps in order:

1. Log in to your router and confirm the firewall is enabled. While you are there, change the admin password if it is still the default.
2. Check each computer: on Windows, search for Windows Security and confirm the firewall is on for all network types. On macOS, check System Settings, then Network, then Firewall.
3. Turn off what you do not use: close remote-access features and open ports you do not recognise or need. If you do not know what a service is, find out before leaving it open.
4. Set up a guest network for visitors and customers, separate from the network your business devices use.
5. Write down the setup: router password location, which devices are connected, and who to call if something goes wrong. Good notes are part of good security.

Common Mistakes to Avoid

The most common mistake is assuming the firewall is on. It usually is, but "usually" is not a check. Another is turning the firewall off to fix a problem and forgetting to turn it back on — a temporary fix that quietly becomes permanent.

People also forget the devices that are not computers. Network printers, CCTV cameras and smart devices are all on the network, and many have weak default passwords. A firewall helps, but changing default passwords on every connected device matters just as much. And remember that a firewall is one layer, not the whole defence: it works alongside updated software, strong passwords and sensible habits, which I cover in my guide to website security basics for small businesses.

Frequently Asked Questions

Is the firewall in my router enough?

For many small businesses, yes — as long as it is enabled, the admin password is changed, and the software firewalls on individual computers are also on. Larger or more sensitive setups may need more, but this covers the basics well.

Will a firewall slow down my internet?

For normal business use, no. Modern firewalls inspect traffic quickly, and any tiny delay is unnoticeable compared with the protection they provide.

Do I need to pay for a firewall?

Not necessarily. The firewalls built into routers, Windows and macOS are free and sufficient for most small businesses. Paid firewalls add features like deeper inspection and central management, which matter more as a business grows.

What if I work from home?

The same rules apply. Your home router almost certainly has a firewall — check that it is on, change the default admin password, and keep your computer's firewall enabled, especially on public Wi-Fi.

A Small Check With a Big Payoff

Setting up a firewall properly takes less than an hour for most small businesses, and most of that time is just finding the router password. It is one of the highest-value security tasks there is: a simple, mostly automatic layer of protection that works quietly in the background every day. Check it once, then put a reminder in your calendar to review it every few months.