return empty lists instead of exceptions for vlan related firewalls