I am testing an installation of the ZESM on a WinXP sp3 laptop and I am using ZESM

I have physically connected the unit to our public side of our network and given the unit a public address. I wanted to check the firewall of ZESM in an unknown location. I went to grc.com and then ran shields up to port scan the unit. I get a report back showing all ports closed except for ports 135, 139, 427, and 1028. Is this normal for ZESM firewall in an unknown location?

I have not modified the firewall in the unknown locaiton, but could if needed to close these ports.

Thanks in advance for any replies.