diff --git a/management/server/types/networkmap.go b/management/server/types/networkmap.go
index a87077702..58cb3c690 100644
--- a/management/server/types/networkmap.go
+++ b/management/server/types/networkmap.go
@@ -313,15 +313,13 @@ func (a *Account) validatePostureChecksOnPeer(ctx context.Context, sourcePosture
 
 // expandPortsAndRanges expands Ports and PortRanges of a rule into individual firewall rules
 func expandPortsAndRanges(base FirewallRule, rule *PolicyRule, peer *nbpeer.Peer) []*FirewallRule {
-	expanded := make([]*FirewallRule, len(rule.Ports)+len(rule.PortRanges))
-	i := 0
+	expanded := make([]*FirewallRule, 0, len(rule.Ports)+len(rule.PortRanges))
 
 	if len(rule.Ports) > 0 {
 		for _, port := range rule.Ports {
 			fr := base
 			fr.Port = port
-			expanded[i] = &fr
-			i++
+			expanded = append(expanded, &fr)
 		}
 		return expanded
 	}
@@ -339,8 +337,7 @@ func expandPortsAndRanges(base FirewallRule, rule *PolicyRule, peer *nbpeer.Peer
 			}
 			fr.Port = strconv.FormatUint(uint64(portRange.Start), 10)
 		}
-		expanded[i] = &fr
-		i++
+		expanded = append(expanded, &fr)
 	}
 
 	return expanded