Is there a way I can disable my RMI client from using HTTP tunneling to get through firewalls?

Yes. Although HTTP tunneling is automatically used by the RMI transport layer to get across firewalls, you can choose to disable this feature by setting the following property at the client:

java.rmi.server.disableHttp=true