diff --git a/Puppetfile b/Puppetfile
index 09545e554..c8ad4c685 100644
--- a/Puppetfile
+++ b/Puppetfile
@@ -164,7 +164,7 @@ mod 'concat',
 
 mod 'firewall',
   :git => 'https://github.com/puppetlabs/puppetlabs-firewall',
-  :ref => 'v3.6.0'
+  :ref => 'v4.0.0'
 
 mod 'inifile',
   :git => 'https://github.com/puppetlabs/puppetlabs-inifile',