a method may include determining one or more rules and communicating the one or more rules to a firewall , where the firewall receives a data unit and determines , based on the one or more rules , whether to forward the data unit to a destination address ; receiving a redirection of a device from the firewall when the firewall determines not to forward the data unit to the destination address ; receiving an indication that the firewall did not forward the data unit to the destination address ; and determining a new rule to allow the firewall to forward the data unit to the destination address and communicating the new rule to the firewall ; and redirecting the device to the destination address .