diff --git a/manifests/profile/haproxy.pp b/manifests/profile/haproxy.pp
index df6c28810..3277bd40f 100644
--- a/manifests/profile/haproxy.pp
+++ b/manifests/profile/haproxy.pp
@@ -136,7 +136,7 @@
     source => $::ipaddress,
     state  => 'NEW',
     jump   => 'accept',
-    tag    => 'haproxy'
+    tag    => "${::datacenter}_haproxy"
   }
 
   @@firewall { "200 HTTP firewall6: HAProxy ${::hostname}":
diff --git a/spec/classes/profile/haproxy_spec.rb b/spec/classes/profile/haproxy_spec.rb
index 1637caa9e..c02a0c1e6 100644
--- a/spec/classes/profile/haproxy_spec.rb
+++ b/spec/classes/profile/haproxy_spec.rb
@@ -306,7 +306,7 @@
       it 'exports a firewall resource tagged haproxy' do
         expect(exported_resources).to contain_firewall('200 HTTP: HAProxy thisnode').with(
           source: my_ip,
-          tag: 'haproxy',
+          tag: 'somedc_haproxy',
         )
       end