diff --git a/manifests/firewall/pre.pp b/manifests/firewall/pre.pp
index db7540a2b..6c03b65de 100644
--- a/manifests/firewall/pre.pp
+++ b/manifests/firewall/pre.pp
@@ -52,12 +52,6 @@ class tripleo::firewall::pre(
     tag     => 'tripleo-firewall-prerule',
   }
 
-  tripleo::firewall::rule{ '003 accept ssh':
-    dport  => '22',
-    extras => $firewall_settings,
-    tag    => 'tripleo-firewall-prerule',
-  }
-
   tripleo::firewall::rule{ '004 accept ipv6 dhcpv6':
     dport       => '546',
     proto       => 'udp',
diff --git a/spec/classes/tripleo_firewall_spec.rb b/spec/classes/tripleo_firewall_spec.rb
index 2bf89fe9e..d60e38196 100644
--- a/spec/classes/tripleo_firewall_spec.rb
+++ b/spec/classes/tripleo_firewall_spec.rb
@@ -69,19 +69,6 @@ describe 'tripleo::firewall' do
           :state    => ['NEW'],
           :provider => 'ip6tables',
         )
-        is_expected.to contain_firewall('003 accept ssh ipv4').with(
-          :dport   => '22',
-          :proto  => 'tcp',
-          :action => 'accept',
-          :state  => ['NEW'],
-        )
-        is_expected.to contain_firewall('003 accept ssh ipv6').with(
-          :dport    => '22',
-          :proto    => 'tcp',
-          :action   => 'accept',
-          :state    => ['NEW'],
-          :provider => 'ip6tables',
-        )
       end
 
       it 'configure basic post firewall rules' do