I would not just have a good Firewall like Watchguard but a good endpoint and server protection with https://www.sophos.com/en-us/content/ransomware.aspx
No customer that I had a problem with ransomware with have had any problems after I installed Sophos Intercept X.
