Customer configured FW filter to block the SSH traffic for all IP and allow only specific IP's. But SSH session been allowed for all external/ internet users.

The internet traffic is from the different VRF, on the lo0.3 is part of that VRF, not lo0.0. Configuration wrongly applied as input filter to lo0.0

Changed the configuration and applied to input filter to lo0.3 and it fixed the issue and SSH worked as expected and blocked for other external/ internet users.