Before you put it on your actual connection: the default config leaves the management interface accessible from WAN in some versions. Check the firewall input chain before going live. mikrotik forum is full of people who got their device owned within hours because they trusted the defaults