checkpoint Spark Firewalls