At my workplace only the security team have access to see the rules on the server network firewalls.
Developers and system engineers don't have any visibility, so they just deploy applications to servers and find out what's broken rather than checking application requirements against the rules in advance.
Is this kind of secrecy a normal/valid security practice?