IPSec policy as well. You can set a policy on the SQL Server to specifically block that IP. Defense in depth. That way if a configuration change happens on the firewall and suddenly allows connections inbound, you've still got the IP blocked at the server.