Firewall resource order