Firewall update + ELK