diff --git a/deployment_scripts/database_firewall.pp b/deployment_scripts/database_firewall.pp
index a7aa65a..f775c74 100644
--- a/deployment_scripts/database_firewall.pp
+++ b/deployment_scripts/database_firewall.pp
@@ -7,6 +7,7 @@ $corosync_input_port          = 5404
 $corosync_output_port         = 5405
 $galera_clustercheck_port     = 49000
 $galera_ist_port              = 4568
+$galera_sst_port              = 4444
 $mysql_backend_port           = 3307
 $mysql_gcomm_port             = 4567
 $mysql_port                   = 3306
@@ -23,7 +24,9 @@ firewall {'030 allow connections from haproxy namespace':
 }
 
 openstack::firewall::multi_net {'101 mysql':
-  port        => [$mysql_port, $mysql_backend_port, $mysql_gcomm_port, $galera_ist_port, $galera_clustercheck_port],
+  port        => [$mysql_port, $mysql_backend_port, $mysql_gcomm_port,
+                  $galera_ist_port, $galera_sst_port,
+                  $galera_clustercheck_port],
   proto       => 'tcp',
   action      => 'accept',
   source_nets => $database_networks,