don't call firewallsso unless there is one configured