firewall asks whether you want to run firewall after installing
sshdconfig admins->globaladmins group