firewall now can use the global option