I still think it would need to be optional to configure the firewall (especially in the case of POCs or where an organization wants to use hardware firewalls and disable host firewalls)