Firewall rules for web services only manage the authorization of outgoing flows from your Artica web server.
Firewall rules allow your local web sites sites to communicate to a defined destination an port.
By default, everybody can access to your Web sites, but your Web sites cannot access to Internet.
If one of your Web site is infected, the malware injected in your Web site will be not able to spam Internet or to send requests to the world.