I upgraded my system manually while I was at home, disconnected from the domain, and the firewall remained off by policy.