The Firewall is frequently (Normally?) built into your router and rules would be provided to allow Roon a path through the firewall. As far as I know there’s no A/V provision for the Nucleus & it hasn’t any web browsing or email facilities.
See posts in;-