diff --git a/puppet/services/tripleo-firewall.yaml b/puppet/services/tripleo-firewall.yaml
index a989e04269..55a5145668 100644
--- a/puppet/services/tripleo-firewall.yaml
+++ b/puppet/services/tripleo-firewall.yaml
@@ -48,8 +48,7 @@ outputs:
         tripleo::firewall::manage_firewall: {get_param: ManageFirewall}
         tripleo::firewall::purge_firewall_rules: {get_param: PurgeFirewallRules}
         tripleo::tripleo_firewall::firewall_rules:
-          '003 accept ssh from controlplane':
-            source: "%{hiera('ctlplane_subnet')}"
+          '003 accept ssh from any':
             proto: 'tcp'
             dport: 22