Yes it does CitrixMan, but who is going to run out to 5,000 machines and manually do that? As far as I can tell, only some type of startup script is going to be able to modify the firewall settings once it has been deployed.