diff --git a/nixos/modules/tests/private-storage.nix b/nixos/modules/tests/private-storage.nix
index 353abc891fafd1cc988e47a1befa530a012470dc..7cd0100d67066148ba55f696d7d2553e046bbbd8 100644
--- a/nixos/modules/tests/private-storage.nix
+++ b/nixos/modules/tests/private-storage.nix
@@ -308,4 +308,10 @@ in {
         $client->log($log);
         die $@;
       };
+
+      # The issuer metrics should be accessible from the monitoring network.
+      $issuer->succeed('curl --silent --insecure --fail --output /dev/null https://172.23.23.11/metrics');
+
+      # The issuer metrics should NOT be accessible from any other network.
+      $issuer->fail('curl --silent --insecure --fail --output /dev/null https://localhost/metrics');
       ''; }