Credentials enforcement using a firewall