What firewall mode meets the design requirements?