diff --git a/ansible/roles/firewall/templates/tsg_conn_sketch.inf.j2 b/ansible/roles/firewall/templates/tsg_conn_sketch.inf.j2
index 48b47304..803b7f5f 100644
--- a/ansible/roles/firewall/templates/tsg_conn_sketch.inf.j2
+++ b/ansible/roles/firewall/templates/tsg_conn_sketch.inf.j2
@@ -47,4 +47,8 @@ FUNC_NAME=tsg_record_ftp_entry
 
 [QUIC]
 FUNC_FLAG=QUIC_CLIENT_HELLO,QUIC_SERVER_HELLO,QUIC_CACHED_CERT,QUIC_COMM_CERT,QUIC_CERT_CHAIN,QUIC_VERSION,QUIC_APPLICATION_DATA
-FUNC_NAME=tsg_record_quic_entry
\ No newline at end of file
+FUNC_NAME=tsg_record_quic_entry
+
+[SSH]
+FUNC_FLAG=ALL
+FUNC_NAME=tsg_record_ssh_entry
\ No newline at end of file