diff --git a/management/server/route_test.go b/management/server/route_test.go
index 48dbd11ed4a..0a2ff6764bc 100644
--- a/management/server/route_test.go
+++ b/management/server/route_test.go
@@ -2431,6 +2431,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 1",
 				Type:      "subnet",
 				Prefix:    netip.MustParsePrefix("10.10.10.0/24"),
+				Enabled:   true,
 			},
 			{
 				ID:        "resource2",
@@ -2438,6 +2439,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 2",
 				Type:      "subnet",
 				Prefix:    netip.MustParsePrefix("192.168.0.0/16"),
+				Enabled:   true,
 			},
 			{
 				ID:        "resource3",
@@ -2445,6 +2447,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 3",
 				Type:      "domain",
 				Domain:    "example.com",
+				Enabled:   true,
 			},
 			{
 				ID:        "resource4",
@@ -2452,6 +2455,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 4",
 				Type:      "domain",
 				Domain:    "example.com",
+				Enabled:   true,
 			},
 			{
 				ID:        "resource5",
@@ -2459,6 +2463,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 5",
 				Type:      "host",
 				Prefix:    netip.MustParsePrefix("10.12.12.1/32"),
+				Enabled:   true,
 			},
 			{
 				ID:        "resource6",
@@ -2466,6 +2471,7 @@ func TestAccount_GetPeerNetworkResourceFirewallRules(t *testing.T) {
 				Name:      "Resource 6",
 				Type:      "domain",
 				Domain:    "*.google.com",
+				Enabled:   true,
 			},
 		},
 		Policies: []*types.Policy{
diff --git a/management/server/store/sql_store_test.go b/management/server/store/sql_store_test.go
index 845bc8fd474..a70ac61a1f9 100644
--- a/management/server/store/sql_store_test.go
+++ b/management/server/store/sql_store_test.go
@@ -2494,7 +2494,7 @@ func TestSqlStore_SaveNetworkResource(t *testing.T) {
 	accountID := "bf1c8084-ba50-4ce7-9439-34653001fc3b"
 	networkID := "ct286bi7qv930dsrrug0"
 
-	netResource, err := resourceTypes.NewNetworkResource(accountID, networkID, "resource-name", "", "example.com", []string{})
+	netResource, err := resourceTypes.NewNetworkResource(accountID, networkID, "resource-name", "", "example.com", []string{}, true)
 	require.NoError(t, err)
 
 	err = store.SaveNetworkResource(context.Background(), LockingStrengthUpdate, netResource)