diff --git a/tripleo_ansible/roles/tripleo_firewall/tasks/main.yml b/tripleo_ansible/roles/tripleo_firewall/tasks/main.yml
index 4890197a7..aaaea87a5 100644
--- a/tripleo_ansible/roles/tripleo_firewall/tasks/main.yml
+++ b/tripleo_ansible/roles/tripleo_firewall/tasks/main.yml
@@ -109,5 +109,6 @@
         state: absent
         regexp: '^((?!.*comment)(?=.*(ironic-inspector|neutron-)))'
       when:
+        - not ansible_check_mode|bool
         - item.find('v=' ~ '^/') == -1
       loop: "{{ neutron_rules.stdout_lines }}"