Even though the firewall guards the router from the public interface, you may still need to disable RouterOS expert services. All WinBox interface functions are as near as is possible mirroring the console capabilities, that's why there won't be any WinBox sections within the handbook. So