* backup firewall configuration will be stored on non-volatile media

* firewall configuration will be exercised before re-configuration is
  considered complete