clarify firewall changes required