diff --git a/salt/firewall/defaults.yaml b/salt/firewall/defaults.yaml
index bf3a003f3..e51bf5825 100644
--- a/salt/firewall/defaults.yaml
+++ b/salt/firewall/defaults.yaml
@@ -370,6 +370,7 @@ firewall:
                 - elastic_agent_update
                 - localrules
                 - sensoroni
+                - kafka
             fleet:
               portgroups:
                 - elasticsearch_rest