added firewall manifest