You can use pre and post renewal hooks in order to temporarily disable those firewall rules.