diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 16d45fb..9624018 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1,4 +1,5 @@
 # Note that the matching is done with re.match()
 '.*\.cert\.sunet\.se$':
   sunet::server:
+    fail2ban: false
     ssh_allow_from_anywhere: false