Branch routers run MikroTik RouterOS 7. WebFig must never face the internet; see the vendor guide on securing your router and the reference webfig/ documentation.