NS8 has removed the firewall from the basis.
But there’s the new Project NethSecurity, which is installed on a seperate box or VM and which handles Firewalling functions. It can be integrated into NS8.
Administration should be seemless, at least when Released… 
My 2 cents
Andy