Updates to AGH trigger Mac firewall

[TNOTA]

I have AGH running on a Mac Mini that is also my server for several other services. I run the built in firewall on MacOS to provide a little protection to my network. AGH is allowed to accept incoming data thru the firewall. The problem is when AGH gets updated the firewall does not recognize it and blocks AGH which kills all DNS for my network. It takes several cycles of adding AGH back to the firewall before it will allow data to pass.

Does anyone else see this issue and is there anyway around it, short of turning off the firewall?