

If your firewall is restricting outbound, that’s unusually strict. Unless you have a really good reason for doing so, your probably making it harder for yourself unnecessarily.
And you’d only need to do it briefly while doing the install, you can turn it back on right after.
It could be things like ATM machines, that have bespoke motherboards, but need to be networked, and therefore patched.