updated call to firewall.show_virtual
show_virt now also matches the protocol for the VIP rule