We are deploying Cisco Anyconnect with Umbrella on our fleet of 1000+ machines. Our secops team has dictated that the firewall must be set to block all incoming connections. We cannot get Umbrella to show protected with this firewall setting enabled. When we turn it off, Umbrella works great, but incoming connections are allowed. Has anyone got it working WITH the incoming connections blocked?