i'd imagine that's largely due to the ipfs system. you're connecting to nodes rather than central servers. Firewalls tend to be fairly broad sweeping with anything that requires a new or unreconised code or protocols. ipfs is new and largely untested but that doesnt mean that its dangerous, just an unknown and firewalls don't like things they don't recognise