diff --git a/salt/firewall/defaults.yaml b/salt/firewall/defaults.yaml
index b10505956..0f7ce911a 100644
--- a/salt/firewall/defaults.yaml
+++ b/salt/firewall/defaults.yaml
@@ -1293,6 +1293,9 @@ firewall:
             beats_endpoint_ssl:
               portgroups:
                 - beats_5644
+            elastic_agent_endpoint:
+              portgroups:
+                - elastic_agent_data
             endgame:
               portgroups:
                 - endgame