firewall upgrade justification