As per the title, my software supplier is trying to persuade me to upgrade to a dedicated server with a hardware firewall. (We're currently on a shared Rackspace virtual host, running Ubuntu.)
Our application's database doesn't contain confidential personal information, and we're using good password security. We also have backups.
Is there any good reason why we should be behind a hardware firewall, or is the supplier just trying to upsell us?
I don't want to be negligent, but I also don't want us to pay for services we don't really need.
Thanks for your help.