allow firewall to be enabled per-server