are you natting traffic from server when they initiate connections ?
If so, probably the group does not work once you suspend the service.
As a workaround, create a similar service [same ip] and assign it to the group instead of the other one.
Regards,
Gilles.