If your firewall team is unreasonable and wants you to send them a per-ip remote management tool port change to port X because they just want IP and ports rather than "wherever source has destination port Y, add port X", just feel free to send them a list with thousands of IP addresses to let them have fun implementing it in several web UIs. By hand, because #Ansible is too hard. ;)
