SEP Firewall Stateful/Incoming

Correct me if I’m wrong, but the SEP12 firewall is a stateful FW, so that it looks at the connection state and packets that match specific rules. As such, does the SEP Firewall block any inbound connections by default? I myself don’t think so but was asked this question. I stated that the SEP12 firewall will allow or block traffic in a stateful “packet” inspection manner, based on predefined rules and or signatures. So if you have the ALLOW ALL rule selected, it will allow inbound and outbound. But by design, I don’t think it just says, anything inbound is blocked.

Let me know, thanks.