I received a new CCR2004-16G-2S+ with 7.5 and it appears to have no default firewall configured and it doesn't have one under
/system default-configuration print.

What is the thinking behind that?

Some models, like CCRs don't come with an extensive default config as they are not designed for inexperienced users.

https://wiki.mikrotik.com/wiki/Manual:D ... igurations

Start with the forums or help website and build the config (disconnected from the Internet)

https://help.mikrotik.com/docs/display/ ... t+Firewall

https://help.mikrotik.com/docs/display/ ... igurations

i think is a device intended to be deployed by somebody who somewhat knows what is doing or at least capable to search info about it

vendor has a starter guide about firewall kindly named Building Your First Firewall

https://help.mikrotik.com/docs/display/ ... t+Firewall

most of the time if a CCR came preconfigured , will be more the hazle of verifying which parts of that config fit to your scenario and which not so not helpful

Thanks guys makes perfect sense. I've done lots of firewalls on RouterOS v6, just haven't done any under v7 yet.

When it comes to firewall, there aren't any important differences between v6 and v7.

The practice that top-of-line devices (e.g. CCR1xxx) are shiped without any firewall is a tradition already since v6, so that's nothing new with CCR2xxx or v7 or both.

Dont get yourself in a knot over the firewall setup.......... Too many docs vids and ideas that create a bloated mess, focus on only the traffic you need to give to the users.

You cant go wrong with the Novice Setup - viewtopic.php?t=180838