firewall assignment added