frewall policy: refactor fragment. Refs #2714