ensure firewall support can actually be called