Does anyone make any changes to their sys-firewall?

My question is pretty simple. Does anyone make any changes to their sys-firewall? And if so, what?

What exactly do you mean by “changes to their sys-firewall”? Like changes to the AppVM/DispVM Template itself?

Yeah, that. But also my question is: Is the sys-firewall perfectly fine as it is, default? What do the special packages do?