Not only a hardware firewall, but av and other security things also.
I suggest you contact them and ask how they protect everything at the moment.
If you know that, you decide if you want to add additional protection yourself or that it is enough.
No need to spend money on a server av if there is no need for
