The NAT firewall is either "on" or "off".
Open AirPort Utility, click the AirPort icon, then click Edit
Click the Network tab at the top of the screen
Look at the setting for Router Mode
If Router Mode is set to DHCP and NAT, then the NAT firewall is automatically enabled.
If Router Mode is set to Off (Bridge Mode), then the NAT firewall is not enabled.