It seems that the bouncer is not able to properly detect the state of the firewall when it is configured through a GPO (see here).
One possible reason would be the use of this deprecated API to get the state of the firewall.
It seems that the FWPolicy2 API (that we already use to manage the rules) can also tell you if the firewall is enabled or not.