Region : Argentina

Model : TL-WDR4300

Hardware Version : V1

Firmware Version :

ISP :

Good afternoon,
New TP-Link user here, so no previous expereince of the hardware. Could not find Archer D7 listed under ADSL router, so thought best to post here.
Can I please just check my understanding that the firewall does NOT need to be enabled to prevent/deny all INCOMING requests to the LAN. I refer to menu options for "Firewall" and "IPV6 Firewall" which are headings on left hand side of admin screen.
Also, i notice "SP Firewall" under "WAN settings" (advanced). Should this be enabled to prevent incoming requests?
Thanks.