What do you think about a portal of my core firewall published to internet?

Hello Reddit,

​

This is my first post. I have an headache, I have a provider that installed a Fortigate 100D on my network and they published it to internet (It's accesible using the public IP and the default port 443). This provider sustain that they have a rule to block login for a minute if they detect a error on login after three intents and it's enough for the security of my comany, even they say that always they do it with all their clients.

I detect it yesterday and I'm not sure what road I should take, I'm thinking on fire this provider. What do you think Reddit?