> All modern NAT routers include a firewall.

AFAICT the ER7212PC is not a "NAT router" but just a "router".

Even some switches have ACL functionality for the IP layer, but they're sold as switches and not as firewalls.