Note: Layer 3 firewall rules configured in group policy are stateless, and corresponding rules may be required for return traffic.
assuming i read this correctly, then its only outbound .
but most sessions need 2-way traffic to establish so it would still be blocked in many cases..
