Open inbound traffic to node

Client need to open inbound traffic to a node in a service that is not in a Virtual Server, a different tcp port. Traffic comes from outside to inside interface and F5 does not have packet filter enable in any partition.

Is it possible to permit this traffic without enabling packet filter? if not, will actual service traffic be affected enabling packet filter? Assuming that packet filter is enable without configuration it will a deny all. Documentation says that takes precedence over virtual server access control, so first is packet filter than virtual server.