Firewall Detection

I created a policy that turns the firewall on and adds rules for Altiris. Is there a way to create a detection with Altiris to double check this is working for each computer? I tested on multiple machines and the policy works, but the policy keeps the computer in the list even though the firewall is on. I would like to have a detection set so that the policy can say you already have the firewall on, I'll remove you from the list. Let me know if this is possible or not.