diff --git a/src/vnm_mad/remotes/lib/security_groups_iptables.rb b/src/vnm_mad/remotes/lib/security_groups_iptables.rb
index 558378563a..2622905969 100644
--- a/src/vnm_mad/remotes/lib/security_groups_iptables.rb
+++ b/src/vnm_mad/remotes/lib/security_groups_iptables.rb
@@ -615,6 +615,9 @@ module SGIPTables
         remove_chains_6.each {|c| commands.add :ip6tables, "-F #{c}" }
         remove_chains_6.each {|c| commands.add :ip6tables, "-X #{c}" }
 
+        # delay to allow kernel to clean up
+        commands.add 'sleep', '0.1'
+
         ipset_list.lines.each do |line|
             if line.match(/^#{chain}(-|$)/)
                 set = line.strip