fix bugs FirewallPolicy*