Even though the firewall guards the router from the general public interface, you may still need to disable RouterOS products and services. Choose parameters as proven in the screenshot, aside from the state options and SSID. You may want to also opt for a distinct frequency and antenna gain;