Wait you mean your firewall appliance has hidden open ports that aren't represented by the actual firewall rules?