Exclude WS from firewall