Port 22 should be added to ferm for cloud. Because sometimes a prod puppet class installs ferm which causes sometime ssh to fail until you add port 22 to iptables.