[debugnik]

A snapshot is taken before installing updates, so you'd get two snapshots from your example. Rolling back would leave you right after adjusting firewall rules.

[e12e]

Not if someone else modified firewall rules while you were installing updates? (Eg: someone else being a Cron job).

[JCattheATM]

That's an easy thing to account for.