try using facter to decide which firewall to use