diff --git a/management/server/types/networkmap.go b/management/server/types/networkmap.go
index 1c0701401..78fe233c7 100644
--- a/management/server/types/networkmap.go
+++ b/management/server/types/networkmap.go
@@ -313,7 +313,7 @@ func (a *Account) validatePostureChecksOnPeer(ctx context.Context, sourcePosture
 
 // expandPortsAndRanges expands Ports and PortRanges of a rule into individual firewall rules
 func expandPortsAndRanges(base FirewallRule, rule *PolicyRule, peer *nbpeer.Peer) []*FirewallRule {
-	var expanded []*FirewallRule
+	expanded := make([]*FirewallRule, len(rule.Ports)+len(rule.PortRanges))
 
 	if len(rule.Ports) > 0 {
 		for _, port := range rule.Ports {