only check access control if firewall is configured
added a bunch of docs