diff --git a/ui/scripts/network.js b/ui/scripts/network.js
index b0ac12ac534..0ae38501807 100644
--- a/ui/scripts/network.js
+++ b/ui/scripts/network.js
@@ -1714,7 +1714,11 @@
 											});
 										}
 										else { //a VPC network from Guest Network section or from VPC section
-										  havingFirewallService = false;  //firewall is not supported in IP from VPC section (because ACL has already supported in tier from VPC section)
+                      // Firewall is not supported in IP from VPC section
+                      // (because ACL has already supported in tier from VPC section)
+										  havingFirewallService = false;
+	                    disallowedActions.push("firewall");
+                      
 											havingVpnService = false; //VPN is not supported in IP from VPC section
 										
 										  if(args.context.ipAddresses[0].associatednetworkid == null) { //IP is not associated with any tier yet