Firewall policy: enable NFQ if needed. Refs #1771