diff --git a/src/opnsense/mvc/app/models/OPNsense/Base/Menu/Menu.xml b/src/opnsense/mvc/app/models/OPNsense/Base/Menu/Menu.xml
index a4b1264d0..1cce18ef8 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Base/Menu/Menu.xml
+++ b/src/opnsense/mvc/app/models/OPNsense/Base/Menu/Menu.xml
@@ -169,10 +169,15 @@
             </Settings>
             <Status url="/carp_status.php"/>
         </VIP>
-        <Schedules order="100" url="/firewall_schedule.php" cssClass="fa fa-calendar fa-fw">
-            <SchedulesEdit url="/firewall_schedule_edit.php*" visibility="hidden"/>
-        </Schedules>
-        <Settings order="200" url="/system_advanced_firewall.php" cssClass="fa fa-cogs fa-fw"/>
+        <Settings order="200" cssClass="fa fa-cogs fa-fw">
+            <Schedules order="100" url="/firewall_schedule.php">
+                <SchedulesEdit url="/firewall_schedule_edit.php*" visibility="hidden"/>
+            </Schedules>
+            <Normalization order="200" url="/firewall_scrub.php">
+                <NormalizationEdit url="/firewall_scrub_edit.php*" visibility="hidden"/>
+            </Normalization>
+            <Advanced order="300" url="/system_advanced_firewall.php"/>
+        </Settings>
         <Diagnostics order="500" cssClass="fa fa-medkit fa-fw">
             <FilterReload order="20"  VisibleName="Filter Reload" url="/status_filter_reload.php"/>
             <pfInfo order="30" url="/diag_pf_info.php" VisibleName="pfInfo"/>
diff --git a/src/opnsense/mvc/app/models/OPNsense/Core/ACL_Legacy_Page_Map.json b/src/opnsense/mvc/app/models/OPNsense/Core/ACL_Legacy_Page_Map.json
index 986f1648f..db8097f42 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Core/ACL_Legacy_Page_Map.json
+++ b/src/opnsense/mvc/app/models/OPNsense/Core/ACL_Legacy_Page_Map.json
@@ -328,6 +328,14 @@
             "firewall_schedule.php*"
         ]
     },
+    "page-firewall-scrub": {
+        "name": "WebCfg - Firewall: Normalization page",
+        "descr": "Allow access to the 'Firewall: Normalization' page.",
+        "match": [
+            "firewall_scrub.php*",
+            "firewall_scrub_edit.php*"
+        ]
+    },
     "page-firewall-schedules-edit": {
         "name": "WebCfg - Firewall: Schedules: Edit page",
         "descr": "Allow access to the 'Firewall: Schedules: Edit' page.",