diff --git a/ncm-ssh/src/main/pan/components/ssh/schema.pan b/ncm-ssh/src/main/pan/components/ssh/schema.pan
index 06b4ad4b37..7b5450741a 100644
--- a/ncm-ssh/src/main/pan/components/ssh/schema.pan
+++ b/ncm-ssh/src/main/pan/components/ssh/schema.pan
@@ -97,7 +97,7 @@ type ssh_daemon_options_type = {
     "AcceptEnv" ? string[]
     "AllowAgentForwarding" ? legacy_binary_affirmation_string
     "AllowGroups" ? string
-    "AllowTcpForwarding" ? legacy_binary_affirmation_string
+    "AllowTcpForwarding" ? string with match (SELF, '^yes|no|all|local|remote$')
     "AllowUsers" ? string
     "AuthorizedKeysFile" ? string
     "Banner" ? string