[mmoret]

Maybe you need to comment out some interfaces in /etc/fw.boot/ifdev
I commented out all accept interfaces which I know I do not use.
That did the trick on Solaris 9

Regards
Martijn
<server># cat ifdev
# network I/F device description file
# all known FireWall-able interfaces should be listed below
# (lines beginning with a '#' followed by a space are ignored)
# Format:
# <i/f device> <deny/accept (DLPI fastpath request)>
#
# DLPI fastpath should be denied unless it is known that FireWall-1
# functions well in this mode with the particular type of interface

#le accept
#be accept
#qe accept
qfe accept
#hme accept
pelx deny
nf deny
tr deny
qaa deny
fa deny

elx deny
iee deny
iprb deny
pcn deny
eepro deny

ipdptp deny

#ge accept
ci deny
plex deny
#eri accept
#dmfe accept
#ce accept
#skge accept
ba deny
bge accept
#lane accept
#sppp accept