Control Panel Firewall GUI and Netsh Return Different Firewall States

I am seeing an issue on some of our machines relating to DirectAccess and the firewall. For DA to work, the public and private firewall profiles must be set to on. Group Policy enforces this for us and sets up all the appropriate DA settings.

However, I am seeing an issue where the DA connectivity status shows "Action needed: the firewall must be turned on". Checking the Control Panel GUI shows that both the public and private are on and that public is connected. Running "Netsh adv show all" shows all 3 profiles off. Setting the state of these to on via Netsh seemed like the appropriate thing to do, but doesn't seem to fix the problem.

This article explains the difference in the GUI vs. what Netsh returns:

http://social.technet.microsoft.com/Forums/en-US/4d8678e2-5653-4fd2-b275-62e0e7008ff9/conflicting-display-of-windows-firewall-setting-from-gui-and-netsh-advfirewall?forum=winserverGP

but doesn't explain why DA was seeing the firewall as off while the Control Panel said it was on. Has anyone seen an issue like this before? Thanks!