diff --git a/deployment/check/common/targetNode.nix b/deployment/check/common/targetNode.nix
index 609a3366..689fe08d 100644
--- a/deployment/check/common/targetNode.nix
+++ b/deployment/check/common/targetNode.nix
@@ -41,10 +41,8 @@ in
         settings.PermitRootLogin = "yes";
       };
 
-      networking = {
-        firewall.enable = false;
-        enableIPv6 = false;
-      };
+      networking.firewall.allowedTCPPorts = [ 22 ];
+      networking.enableIPv6 = false;
 
       ## Test VMs don't have a bootloader by default.
       # boot.loader = {