diff --git a/Sanity/cmdline-active-mode-with-20-port-blocked/main.fmf b/Sanity/cmdline-active-mode-with-20-port-blocked/main.fmf
index bd8221f..bbba698 100644
--- a/Sanity/cmdline-active-mode-with-20-port-blocked/main.fmf
+++ b/Sanity/cmdline-active-mode-with-20-port-blocked/main.fmf
@@ -21,10 +21,8 @@ tag:
   - TIPpass
   - TIPpass_FIPS
   - TIPpass_Security
-  - Tier1
   - TierCandidatesPASS
   - TipWaived6
-tier: '1'
 link:
   - relates: https://bugzilla.redhat.com/show_bug.cgi?id=849940
   - relates: https://bugzilla.redhat.com/show_bug.cgi?id=852636
diff --git a/Sanity/cmdline-active-mode-with-20-port-blocked/runtest.sh b/Sanity/cmdline-active-mode-with-20-port-blocked/runtest.sh
index 0d0051b..0e48cd0 100755
--- a/Sanity/cmdline-active-mode-with-20-port-blocked/runtest.sh
+++ b/Sanity/cmdline-active-mode-with-20-port-blocked/runtest.sh
@@ -34,7 +34,10 @@ rlJournalStart
         rlRun "echo 'testcontent' > /home/$USER/testfile" 0 "Creating test file"
         rlRun "echo $PASS | passwd --stdin $USER"
         rlRun "rlServiceStart vsftpd"
-        rlRun "iptables -I INPUT -p tcp --sport ftp-data -j REJECT --reject-with icmp-net-unreachable"
+        rlRun "rlServiceStart firewalld"
+        rlRun "firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --sport ftp-data -j REJECT --reject-with icmp-net-unreachable"
+        rlRun "rlServiceStart firewalld"
+        #rlRun "iptables -I INPUT -p tcp --sport ftp-data -j REJECT --reject-with icmp-net-unreachable"
     rlPhaseEnd
 
     rlPhaseStartTest
@@ -48,6 +51,7 @@ rlJournalStart
 
     rlPhaseStartCleanup
         rlRun "iptables -D INPUT 1"
+        rlRun "rlServiceRestore firewalld"
         rlRun "rlServiceRestore vsftpd"
         rlRun "userdel -fr $USER" 0 "Remove testing user"
         if rlIsRHEL '<7.3'; then