diff --git a/source/firewall/firewall.c b/source/firewall/firewall.c
index 50538050..d9beed91 100644
--- a/source/firewall/firewall.c
+++ b/source/firewall/firewall.c
@@ -10766,7 +10766,7 @@ static int do_wan2lan(FILE *fp)
  * Return Values  :
  *    0              : Success
  */
-#if defined(_SR213_PRODUCT_REQ_) || defined(_SCER11BEL_PRODUCT_REQ_) || defined(_HUB4_PRODUCT_REQ_)
+#ifdef SKY
 static int do_block_lan_access_to_wan_ssh(FILE *fp)
 {
    FIREWALL_DEBUG("Entering do_block_lan_access_to_wan_ssh\n");
@@ -13875,7 +13875,7 @@ static int prepare_enabled_ipv4_firewall(FILE *raw_fp, FILE *mangle_fp, FILE *na
    do_lan2wan(mangle_fp, filter_fp, nat_fp); 
    do_wan2lan(filter_fp);
    do_filter_table_general_rules(filter_fp);
-#if defined(_SR213_PRODUCT_REQ_) || defined(_SCER11BEL_PRODUCT_REQ_) || defined(_HUB4_PRODUCT_REQ_)
+#ifdef SKY
    if(isWanReady)
         do_block_lan_access_to_wan_ssh(filter_fp);
 #endif
diff --git a/source/firewall/firewall_ipv6.c b/source/firewall/firewall_ipv6.c
index 755c1580..e191de12 100644
--- a/source/firewall/firewall_ipv6.c
+++ b/source/firewall/firewall_ipv6.c
@@ -518,6 +518,9 @@ void do_ipv6_filter_table(FILE *fp){
    fprintf(fp, ":lan2wan_pc_site - [0:0]\n");
    fprintf(fp, ":lan2wan_pc_service - [0:0]\n");
    fprintf(fp, ":wan2lan - [0:0]\n");
+#ifdef SKY
+   fprintf(fp, "-I INPUT 1 -p tcp --dport 10022 -j DROP\n");
+#endif
 
 #if defined (_HUB4_PRODUCT_REQ_) || defined (_RDKB_GLOBAL_PRODUCT_REQ_)
 #if defined (HUB4_BFD_FEATURE_ENABLED) || defined (IHC_FEATURE_ENABLED)