hybrid firewall model