Firewall functionality on a router is not on by default. You have to setup the firewall by issuing commands to tell the router how to filter traffic.
So basically if you remove all access lists and "ip inspect" statements, you have turned the firewall off.