Basic stuff I've found out about the Firewall product.
File that is the virtual config sys is QIPSINT/QAISAPKG
You can increase the sockets available memory by adding after the ...sockets.sys (line 105) switch settings of /mem:5000 /gdt:500
sbmnwscmd 'netstat -m' *firewall firewallname *base
The second number returned should be in the hundreds. If it is in the double/single digits then you are running out of memory in OS/2