diff --git a/salt/firewall/soc_firewall.yaml b/salt/firewall/soc_firewall.yaml
index d671a0674..eda5c9a5e 100644
--- a/salt/firewall/soc_firewall.yaml
+++ b/salt/firewall/soc_firewall.yaml
@@ -3,19 +3,28 @@ firewall:
     hosts:
       analyst_workstations:
         description: List of IP Addresses or CIDR blocks to allow analyst workstations.
+        global: True
       analyst: 
         description: List of IP Addresses or CIDR blocks to allow analyst connections.
+        global: True
       standalone: 
         description: List of IP Addresses or CIDR blocks to allow standalone connections.
+        global: True
       eval: 
         description: List of IP Addresses or CIDR blocks to allow eval connections.
+        global: True
       idh: 
         description: List of IP Addresses or CIDR blocks to allow idh connections.
+        global: True
       manager: 
         description: List of IP Addresses or CIDR blocks to allow manager connections.
+        global: True
       heavynode: 
         description: List of IP Addresses or CIDR blocks to allow heavynode connections.
+        global: True
       searchnode: 
         description: List of IP Addresses or CIDR blocks to allow searchnode connections.
+        global: True
       receiver: 
-        description: List of IP Addresses or CIDR blocks to allow receiver connections.
\ No newline at end of file
+        description: List of IP Addresses or CIDR blocks to allow receiver connections.
+        global: True