diff --git a/modules/net-firewall-policy/factory.tf b/modules/net-firewall-policy/factory.tf
index 9672381f..4c22775a 100644
--- a/modules/net-firewall-policy/factory.tf
+++ b/modules/net-firewall-policy/factory.tf
@@ -73,7 +73,7 @@ locals {
       direction               = "INGRESS"
       name                    = k
       priority                = v.priority
-      action                  = lookup(v, "action", "deny")
+      action                  = lookup(v, "action", "allow")
       description             = lookup(v, "description", null)
       disabled                = lookup(v, "disabled", false)
       enable_logging          = lookup(v, "enable_logging", null)