diff --git a/salt/filebeat/init.sls b/salt/filebeat/init.sls
index 4d7f81819..64cdc47fc 100644
--- a/salt/filebeat/init.sls
+++ b/salt/filebeat/init.sls
@@ -74,7 +74,7 @@ so-filebeat:
     - port_bindings:
         - 0.0.0.0:514:514/udp
         - 0.0.0.0:514:514/tcp
-        - 0.0.0.0:5066/tcp
+        - 0.0.0.0:5066:5066/tcp
     - watch:
       - file: /opt/so/conf/filebeat/etc/filebeat.yml
 
diff --git a/salt/firewall/portgroups.yaml b/salt/firewall/portgroups.yaml
index 55a09c6bf..1386267f5 100644
--- a/salt/firewall/portgroups.yaml
+++ b/salt/firewall/portgroups.yaml
@@ -18,6 +18,9 @@ firewall:
       beats_5644:
         tcp:
           - 5644
+      beats_5066:
+        tcp:
+          - 5066
       cortex:
         tcp:
           - 9001