diff --git a/puppet/services/octavia-health-manager.yaml b/puppet/services/octavia-health-manager.yaml
index 35874394bf..d4693888e9 100644
--- a/puppet/services/octavia-health-manager.yaml
+++ b/puppet/services/octavia-health-manager.yaml
@@ -42,6 +42,12 @@ parameters:
     type: string
     description: Key to identify heartbeat messages for amphorae.
     hidden: true
+  OctaviaMgmtPortDevName:
+    type: string
+    default: "o-hm0"
+    description: Name of the octavia management network interface using
+                 for communication between octavia worker/health-manager
+                 with the amphora machine.
 
 resources:
 
@@ -66,6 +72,11 @@ outputs:
           - get_attr: [OctaviaBase, role_data, config_settings]
           - octavia::health_manager::heartbeat_key: {get_param: OctaviaHeartbeatKey}
             octavia::health_manager::event_streamer_driver: 'queue_event_streamer'
+            tripleo.octavia_api.firewall_rules:
+              '200 octavia health manager interface':
+                proto: udp
+                dport: 5555
+                iniface: {get_param: OctaviaMgmtPortDevName}
       service_config_settings:
         fluentd:
           tripleo_fluentd_groups_octavia_health_manager: