diff --git a/backend/app/service/firewall.go b/backend/app/service/firewall.go
index a9edda788..e5e1aa83f 100644
--- a/backend/app/service/firewall.go
+++ b/backend/app/service/firewall.go
@@ -241,6 +241,9 @@ func (u *FirewallService) OperatePortRule(req dto.PortRuleOperate, reload bool)
 			if err := u.operatePort(client, req); err != nil {
 				global.LOG.Errorf("%s port %s/%s failed (strategy: %s, address: %s), err: %v", req.Operation, req.Port, req.Protocol, req.Strategy, req.Address, err)
 			}
+			if len(req.Protocol) == 0 {
+				req.Protocol = "tcp/udp"
+			}
 			_ = u.addPortRecord(req)
 		}
 		return nil