Separate plays for CMDB and firewall updates