Yes, the Firewall Wizard has the option to restrict access to the Enterprise Manager. One of the options is:
"Do you want to specify the Client IP address ranges that should be permitted to access the Enterprise Manager"
Please be sure you're running the latest version of the Firewall Wizard (FSH_Firewall_70a.exe) which is available on the McAfee download server with your Grant Number.
I hope that helps!