Lock around firewall update