modes in FirewallConfiguration