Maybe you could do port knocking to have the firewall open the port to that IP after you hit a series of ports in the proper sequence.