check firewall state before applying changes