you sure that it's called after firewall listener? Check events on profiler.