diff --git a/salt/firewall/custom_groups/groups b/salt/firewall/custom_groups/groups
new file mode 100644
index 000000000..e69de29bb
diff --git a/salt/firewall/soc_firewall.yaml b/salt/firewall/soc_firewall.yaml
index 614f98190..ff2409b54 100644
--- a/salt/firewall/soc_firewall.yaml
+++ b/salt/firewall/soc_firewall.yaml
@@ -1,4 +1,11 @@
 firewall:
+  custom_groups:
+    groups:
+      description: List of group names to create.
+      file: True
+      global: True
+      title: Custom Firewall Groups
+      helpLink: firewall.html#host-groups
   hostgroups:
     analyst_workstations:
       description: List of IP addresses or CIDR blocks to allow analyst workstations.