Is a network firewall included?

All servers sit behind a stateless edge firewall; managed customers can request stateful rules at no extra cost.