Important: If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.
To use firewall:
enable it at Datacenter level (note default input policy is REJECT!)
Datacenter rules are propagated to all nodes
Node default input policy is DROP !
27. Appendix F: Firewall Macro Definitions