define firewall::virtual::web(
  $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'),
  $destination
) {
  if $implementation == 'shorewall' {
    firewall::implementations::shorewall::virtual::web { "${name}":
      destination => $destination,
    }
  }
}